Security Measures
Commitment to Security
As a leading provider of Electronic
Commerce ("EC") tools
and services on the Internet, CNTextile is firmly committed
to information security. Our infrastructure and network are carefully
protected
from unauthorized access and security enhancements are constantly
being implemented. You can be assured that we take strict security
measures (consistent with good and sound industry practice
and
standards) so as to safeguard and maintain the confidentiality
of our customers'
personal and company-confidential information. If you have
any suggestions to enhance our security measures or concerns
regarding
security in
your use of CNTextile services and products, please send an
E-Mail to .
Corporate Security
CNTextile's internal network is protected by a secure
firewall. All access to the internal network, including dial-in,
E-Mail and
Internet access, are permitted only to authorized users. Computer
accounts are password-protected and regular security audits are
conducted to ensure that only secured passwords are used. Public domain
hacking
software is deployed to test internal security measures. Audit
trails of Internet access and usage are also kept.
All CNTextile staff,
as a condition of employment, are required to adhere to and practice
strict security guidelines in their day-to-day
job functions. An IT Security Policy is in place to ensure that
all CNTextile staff are educated on the importance of confidentiality
and security. In addition, our customers are made aware of our
security
requirements and are requested to comply.
Server Security
In general, the more customized the machine the less vulnerable
the system becomes. CNTextile uses highly customized Unix-based
servers with only the necessary software and services installed so
that they
perform the required EC functions and nothing else. The machines
cease to be general-purpose machines, and their vulnerabilities
are greatly reduced.
Accessibility to our servers is restricted to
a limited number of
authorized personnel, and passwords are selected based on strict
rules. For additional security, our servers are located in highly
secured environments that offer state-of-the-art physical security.
Web-Based Transactions Security
CNTextile services make use of login accounts complete with login
names and passwords. In addition, Secure Sockets Layer ("SSL")
is deployed so that transmissions of sensitive password and trading
data occur using encrypted and secure communication channels
to prevent eavesdropping and decoding of information. Transaction
information,
such as contact details and VISA numbers, can only be read by
authorized CNTextile web servers.
CNTextile uses SSL that supports 128-bit encryption,
the strongest Internet standard currently in use More details about
SSL support
can be found here.
Important Notice
While we believe that the security measures which we adopt are
consistent with good and sound industry practice and standards,
we (like anyone
else) cannot guarantee that such measures are "perfect",
as "perfect security" does not exist on the Internet.
|