...
Authentication & Authorization - User authentication methods, login failure policy, user roles, and spam protection for BSS and Storefront.
Cloud Security - Infrastructure security, security incident response, vulnerability scanning, penetration testing, encryption, backups and backups patch management of the platform infrastructure hosted on Microsoft Azure.
Application Security - Secure code development, framework security controls, quality assurance, separate environments, and bug bounty program of the platform application.
HR Security - Training, policies, and confidentiality agreements of the platform employees.
Data Privacy & Ownership - GDPR and PCI compliance, data ownership, data deletion, and security audits of the platform data.
...