A.10.9 Electronic commerce services

Objective: To ensure the security of electronic commerce services, and their secure use.

A.10.9.1 Electronic commerce

Control

Information involved in electronic commerce passing over public networks shall be protected from fraudulent activity, contract dispute, and unauthorized disclosure and modification.

A.10.9.2On-line transactions

Control

Information involved in on-line transactions shall be protected to prevent incomplete transmission, mis-routing, unauthorized message alteration, unauthorized disclosure, unauthorized message duplication or replay.

A.10.9.3 Publicly available information

Control

The integrity of information being made available on a publicly available system shall be protected to prevent unauthorized modification.