eBill Service Security Policy

The Internet's growth, popularity and usefulness depend on the secure handling of personal and financial information. The protection of consumers' sensitive information is critical to Alagasco's success. Thus, in conjunction with our partner we provide you with a high degree of security. In order to ensure that the appropriate controls, procedures, and mechanisms are in place, our EBPP partner has a dedicated information security department to ensure security and controls of the deployed application.

Application Level
Our EBPP application employs the following controls and measures: Uses Secure Socket Layer (SSL) 128 bit encryption for all transmissions of consumer data in order to assure privacy.

Our application automatically logs out an end user after a certain period of time in order to protect personal information from onlookers.

User ID and password can be changed by the end user at first sign on and subsequently. This further protects the end user from tampering by others. The application also forces the users to change their password at periodic intervals.

Network and Facility Level
Our EBPP application-processing servers are located within state-of-the-art facilities where we and third parties conduct regular reviews and security audits of our environment, policies and procedures. Our partner is also subjected to regulatory audits such as FFIEC.

Firewalls are configured to deny everything unless it is expressly permitted. The data center utilizes intrusion detection and scanning software. Periodic network scanning and vulnerability testing is done both at network level and application level.

Multi level access permissions are needed to gain entrance to physical facility. Strong authentication is needed to gain access to production servers. Security incident response team is available 24 hours a day. Personnel background checks are in place for key positions.