IMPLEMENTING THE CLOUD SECURITY PRINCIPLES

*298. *XLGDQFH

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

1RWH7KLVSXEOLFDWLRQLVLQ%(7$3OHDVHVHQGDQ\IHHGEDFNWRWKHDGGUHVV SODWIRUP#FHVJJVLJRYXN 7KLVVHFWLRQRIWKH&ORXG6HFXULW\*XLGDQFHSURYLGHVJXLGDQFHRQGLIIHUHQWDSSURDFKHVWR LPSOHPHQWLQJWKH&ORXG6HFXULW\3ULQFLSOHV(DFKSULQFLSOHUHSUHVHQWVDIXQGDPHQWDO VHFXULW\DVSHFWWKDW\RXVKRXOGFRQVLGHUZKHQGHWHUPLQLQJZKLFKFORXGVHUYLFHVPHHW\RXU QHHGV )RUHDFKSULQFLSOHWKLVJXLGHFRQWDLQV $GHVFULSWLRQRIWKHSULQFLSOH ,PSOHPHQWDWLRQREMHFWLYHVZKLFKGHVFULEHKRZWKHSULQFLSOHVFDQEHDGGUHVVHG ,PSOHPHQWDWLRQDSSURDFKHVZKLFKDUHVSHFLILFWHFKQLTXHVWKDWFDQEHXVHGWRVDWLVI\ WKHLPSOHPHQWDWLRQREMHFWLYHV

1RWHWKDWWKHZDUQLQJV\PERO LQGLFDWHVDQDSSURDFKWKDWUHVXOWVLQDSDUWLFXODUO\KLJK ULVNUHPDLQLQJ

&RPPRQDSSURDFKHVWRLPSOHPHQWLQJ&ORXG6HFXULW\ 3ULQFLSOHV 7KHUHDUHDQXPEHURIFRPPRQDSSURDFKHVWKDWFDQEHXVHGWRDGGUHVVVHYHUDO&ORXG 6HFXULW\3ULQFLSOHV1RWHWKDWWKHVHFDQEHXVHGLQFRPELQDWLRQWRSURYLGHJUHDWHU DVVXUDQFH

6HUYLFHSURYLGHUDVVHUWLRQ 7KHVHUYLFHSURYLGHUGHVFULEHVKRZWKHLUVHUYLFHFRPSOLHVZLWKWKHLPSOHPHQWDWLRQ REMHFWLYHVEXWLVXQZLOOLQJRUXQDEOH WRSURYLGHLQGHSHQGHQWYDOLGDWLRQRI FRPSOLDQFH &RQVXPHUVDUHUHOLDQWRQWKHKRQHVW\DFFXUDF\DQGFRPSOHWHQHVVRIWKHVHUYLFH SURYLGHU¶VDVVHUWLRQV7KLVFRQILGHQFHZLOOEHEDVHGRQ WKHVHUYLFHSURYLGHU¶VOHYHORIPDWXULW\DURXQGVHFXULW\ WKHH[LVWHQFHRIDQLQKRXVHVHFXULW\WHDP SURDFWLYHWHVWLQJDQGKLVWRULFDOHYLGHQFHRIUHVSRQGLQJWRVHFXULW\LVVXHV

&RQWUDFWXDOFRPPLWPHQW 7KHVHUYLFHSURYLGHUFRQWUDFWXDOO\FRPPLWVWRPHHWWKHLPSOHPHQWDWLRQREMHFWLYHV 7KHFRQWUDFWVKRXOGKDYHVSHFLILFDQGPHDVXUDEOHUHTXLUHPHQWVFODXVHVZKLFKDUHWRR JHQHULFFDQDGGFRVWKDYHOLPLWHGYDOXHDQGPD\EHXQHQIRUFHDEOH

,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV $QLQGHSHQGHQWWKLUGSDUW\UHYLHZVDQGFRQILUPVWKHVHUYLFHSURYLGHU¶VDVVHUWLRQV 6LQFHWKHWKLUGSDUW\UHYLHZPD\QRWEHSHUIRUPHGWRDUHFRJQLVHGVWDQGDUGLWPLJKWQRW WKRURXJKO\DVVHVVWKHVHFXULW\GHOLYHUHGE\LPSOHPHQWDWLRQRIWKHSULQFLSOH&RQVXPHUV VKRXOGDVVXUHWKHPVHOYHVWKDWWKHWKLUGSDUW\KDVFDUULHGRXWDGHTXDWHWHVWLQJDQGKDVWKH ULJKWVNLOOVWRXQGHUWDNHVXFKDUHYLHZ

6HUYLFHSURYLGHUKROGVFHUWLILFDWHRIFRPSOLDQFHZLWKDUHFRJQLVHGVWDQGDUG 'HSHQGLQJRQWKHVWDQGDUGDQGFHUWLILFDWLRQSURFHVVFHUWLILFDWLRQFDQVWLOOEHDFKLHYHG GHVSLWHDVFRSHWKDWGRHVQRWDGGUHVVWKHLPSOHPHQWDWLRQREMHFWLYHV,QRUGHUWRDFKLHYH FHUWLILFDWLRQDJDLQVWUHOHYDQWVWDQGDUGVLWLVRQO\QHFHVVDU\IRUDQDXGLWRUWRYHULI\WKDW FRQWUROVH[LVWRUWKDWDQRUJDQLVDWLRQSROLF\RQWKHLUXVHH[LVWV WKLVGRHVQRWYHULI\WKDW VDLGFRQWUROVDUHLQSUHVHQWDQGHIIHFWLYH

&HUWLILFDWLRQDQGLPSOHPHQWDWLRQRIFRQWUROVUHYLHZHGE\DTXDOLILHGLQGLYLGXDO $VXLWDEO\TXDOLILHGLQGLYLGXDOVXFKDVD&&3FHUWLILHGµ$FFUHGLWRU¶RUµ,$$XGLWRU¶DWWKH VHQLRURUOHDGOHYHORUDUHFRJQLVHGVXEMHFWPDWWHUH[SHUW UHYLHZVWKHVFRSHRIWKH FHUWLILFDWLRQDQGWKHLPSOHPHQWDWLRQRIWKHFRQWUROV7KLVDSSURDFKSURYLGHVDKLJKHU GHJUHHRIFRQILGHQFHWKDWWKHVHUYLFHPHHWVWKHVWDWHGREMHFWLYHVWKURXJKFHUWLILFDWLRQ DJDLQVWDQDSSURSULDWHVWDQGDUG

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

$VXLWDEO\TXDOLILHGLQGLYLGXDOUHYLHZVWKHVFRSHRIWHVWLQJ 9DOLGDWLRQVKRXOGHQVXUHWKDWDOOVHUYLFHLPSDFWLQJFRQWUROVDUHZLWKLQVFRSHRIWKHWHVWLQJ 7KHVNLOOVDQGH[SHULHQFHRIWKHTXDOLILHGUHYLHZHUVXFKDV&&3FHUWLILHGµ$FFUHGLWRU¶RUµ,$ $XGLWRU¶DWWKHVHQLRURUOHDGOHYHORUDUHFRJQLVHGVXEMHFWPDWWHUH[SHUW ZLOODIIHFWWKH FRQILGHQFHWKDWFDQEHSODFHGLQWKHUHYLHZ

$VVXUDQFHLQWKHVHUYLFHGHVLJQ $TXDOLILHGVHFXULW\DUFKLWHFWLVLQYROYHGLQWKHGHVLJQRUUHYLHZRIWKHVHUYLFH DUFKLWHFWXUH 4XDOLILFDWLRQVVXFKDV&&3FHUWLILHGµ,$$UFKLWHFW¶DWWKH6HQLRURU/HDGOHYHOFDQEHXVHG WRJDLQFRQILGHQFHLQWKHUHYLHZHU¶VDELOLW\5HYLHZLQJWKHGHVLJQDQGLPSOHPHQWDWLRQRI

LWVUHFRPPHQGDWLRQV ZLOOJLYHFRQILGHQFHWKDW WKHDUFKLWHFWXUHGHIHQGVDJDLQVWFRPPRQDWWDFNV WKHSURSRVHGVHFXULW\FRQWUROVDUHDSSURSULDWH WKHSURSRVHGDUFKLWHFWXUHZRXOGDOORZHIIHFWLYHVHFXUHRSHUDWLRQRIWKHVHUYLFH ,WGRHVQRWYHULI\WKDWFRPSRQHQWVKDYHEHHQSURSHUO\FRQILJXUHGRUWKDWWKHFRPSRQHQWV DUHFRUUHFWO\RUUREXVWO\LPSOHPHQWHG

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

3ULQFLSOH'DWDLQWUDQVLWSURWHFWLRQ 'HVFULSWLRQ'DWDLQWUDQVLWSURWHFWLRQ &RQVXPHUGDWDWUDQVLWLQJQHWZRUNVVKRXOGEHDGHTXDWHO\SURWHFWHGDJDLQVWWDPSHULQJ LQWHJULW\ DQGHDYHVGURSSLQJFRQILGHQWLDOLW\ 7KLVVKRXOGEHDFKLHYHGYLDDFRPELQDWLRQ RI QHWZRUNSURWHFWLRQGHQ\LQJ\RXUDWWDFNHUDFFHVVWRLQWHUFHSWGDWD HQFU\SWLRQGHQ\LQJ\RXUDWWDFNHUWKHDELOLW\WRUHDGGDWD

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHVXIILFLHQWO\FRQILGHQWWKDW 'DWDLQWUDQVLWLVSURWHFWHGEHWZHHQWKHFRQVXPHU¶VHQGXVHUGHYLFHDQGWKHVHUYLFH 'DWDLQWUDQVLWLVSURWHFWHGLQWHUQDOO\ZLWKLQWKHVHUYLFH 'DWDLQWUDQVLWLVSURWHFWHGEHWZHHQWKHVHUYLFHDQGRWKHUVHUYLFHVHJZKHUH$3,VDUH H[SRVHG

,PSOHPHQWDWLRQDSSURDFKHV $SSURDFK

'HVFULSWLRQ

*XLGDQFH

$VVXUHG FRPSRQHQWV FRPPXQLW\ :LGH$UHD 1HWZRUN :$1 VHUYLFH

$VHUYLFHVXFKDVWKH 3XEOLF6HUYLFHV1HWZRUN 361 µDVVXUHGVHUYLFH¶ XQHQFU\SWHG FDQSURYLGH FRPPXQLW\RUSULYDWH FRQQHFWLRQV

1RFU\SWRJUDSKLFSURWHFWLRQVDUHSURYLGHGE\WKHVHUYLFHSURYLGHU PHDQLQJWKDWDFRPSURPLVHRI:$1LQIUDVWUXFWXUHZRXOGUHVXOWLQ WKHORVVRIFRQILGHQWLDOLW\DQGLQWHJULW\RIFRQVXPHUGDWD$OWKRXJK WKHUHDUHQRFU\SWRJUDSKLFSURWHFWLRQVIRU361µDVVXUHGVHUYLFH¶ VHUYLFHVWKDWKDYHEHHQFHUWLILHGWKURXJKWKH&(6*$VVXUHG 6HUYLFH7HOHFRPV VFKHPHSURYLGHVVRPHDVVXUDQFHLQWKH SURWHFWLRQVRIWKHQHWZRUN

/HJDF\66/ DQG7/6

7KHVHUYLFHLVDFFHVVHG XVLQJ66/RUOHJDF\ YHUVLRQVRI7/6LQFOXGLQJ 7/6YHUVLRQVEHORZ

66/RU7/6YHUVLRQVHDUOLHUWKDQFRQWDLQYXOQHUDELOLWLHV ZKLFKFRXOGEHXVHGE\DQDWWDFNHUWRREWDLQRULQWHUIHUHZLWK FRQVXPHUGDWD

7/6 9HUVLRQ RUDERYH

8VHRI7/6FRQILJXUHGWR XVHFLSKHUVXLWHVDQG FHUWLILFDWHVL]HV UHFRPPHQGHGE\ &(6*

7KHODFNRIIRUPDODVVXUDQFHLQ7/6LPSOHPHQWDWLRQVPHDQVWKHUH PD\EHLPSOHPHQWDWLRQZHDNQHVVHV8VLQJUHFHQWVXSSRUWHGDQG IXOO\SDWFKHGYHUVLRQVRI7/6LPSOHPHQWDWLRQVIURPUHSXWDEOH VRXUFHVZLOOKHOSWRPDQDJHWKLVULVN

$VVXUHG FRPSRQHQWV HQFU\SWHG FRPPXQLW\ :$1VHUYLFH

$VHUYLFHVXFKDVWKH361 µSURWHFWHGVHUYLFH¶ HQFU\SWHG FDQSURYLGH DVVXUHGQHWZRUNOD\HU HQFU\SWLRQIRUD FRPPXQLW\

3OHDVHUHIHUWR$VVXUDQFHLQWKHVHUYLFHFRPSRQHQWVIURPWKHOLVWRI FRPPRQDSSURDFKHV

$VVXUHG FRPSRQHQWV ,3VHF931 JDWHZD\

7KHVHUYLFHFDQH[SRVHD 931*DWHZD\ZKLFKKDV )RXQGDWLRQ*UDGH FHUWLILFDWLRQDJDLQVWDQ DSSURSULDWH6HFXULW\ &KDUDFWHULVWLFVXFKDVWKH ,3VHF6HFXULW\ *DWHZD\

3OHDVHUHIHUWR$VVXUDQFHLQWKHVHUYLFHFRPSRQHQWVIURPWKHOLVWRI FRPPRQDSSURDFKHV

6HUYLFH SURYLGHU DVVHUWLRQ ERQGHGILEUH RSWLF FRQQHFWLRQV

%RQGHGILEUHRSWLF FRQQHFWLRQVEHWZHHQ SK\VLFDOO\SURWHFWHG ORFDWLRQVFDQEHXVHGWR SURYLGHSULYDWH FRQQHFWLRQVEHWZHHQGDWD FHQWUHV

3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQ DSSURDFKHV

,QGHSHQGHQW YDOLGDWLRQRI DVVHUWLRQV ERQGHGILEUH RSWLF FRQQHFWLRQV

%RQGHGILEUHRSWLF FRQQHFWLRQVEHWZHHQ SK\VLFDOO\SURWHFWHG ORFDWLRQVFDQEHXVHGWR SURYLGHSULYDWH FRQQHFWLRQVEHWZHHQGDWD FHQWUHV 7KHLPSOHPHQWDWLRQLV YDOLGDWHGE\DVXLWDEO\ TXDOLILHGLQGLYLGXDOVXFK DVD&&3FHUWLILHG µ$FFUHGLWRU¶RUµ,$$XGLWRU¶ DWWKHVHQLRURUOHDGOHYHO

7KHVHFXULW\RIWKHVHOLQNVLVGHSHQGHQWRQSURYLVLRQIRUPRQLWRULQJ WKHPWKLVVKRXOGEHRQHRIWKHIDFWRUVFRYHUHGE\DQLQGHSHQGHQW UHYLHZRIWKHLPSOHPHQWDWLRQ

RUDUHFRJQLVHGVXEMHFW PDWWHUH[SHUW

$GGLWLRQDOQRWHV 7RFRPSURPLVHGDWDLQWUDQVLWWKHDWWDFNHUZRXOGQHHGDFFHVVWRLQIUDVWUXFWXUHZKLFKWKH GDWDWUDQVLWVRYHU7KLVFRXOGHLWKHUWDNHWKHIRUPRISK\VLFDODFFHVVRUORJLFDODFFHVVLI WKHDWWDFNHUKDVFRPSURPLVHGFRPSRQHQWVZLWKLQWKHWUDQVLWLQIUDVWUXFWXUH,WLVPRUHOLNHO\ WKDWDWWDFNHUVZRXOGEHDEOHWRDFFHVVLQIUDVWUXFWXUHEHWZHHQWKHFRQVXPHUDQGWKH VHUYLFHUDWKHUWKDQDFFHVVLQIUDVWUXFWXUHZLWKLQWKHVHUYLFH DOWKRXJKWKHLPSDFWRIDQ DWWDFNHUDFFHVVLQJFRPPXQLFDWLRQVLQWHUQDOWRWKHVHUYLFHLVVLJQLILFDQWO\JUHDWHU
3ULQFLSOH$VVHWSURWHFWLRQDQGUHVLOLHQFH 'HVFULSWLRQ$VVHWSURWHFWLRQDQGUHVLOLHQFH &RQVXPHUGDWDDQGWKHDVVHWVVWRULQJRUSURFHVVLQJLWVKRXOGEHSURWHFWHGDJDLQVW SK\VLFDOWDPSHULQJORVVGDPDJHRUVHL]XUH 7KHDVSHFWVWRFRQVLGHUFRPSULVH 3K\VLFDOORFDWLRQDQGOHJDOMXULVGLFWLRQ

'DWDFHQWUHVHFXULW\ 'DWDDWUHVWSURWHFWLRQ 'DWDVDQLWLVDWLRQ (TXLSPHQWGLVSRVDO 3K\VLFDOUHVLOLHQFHDQGDYDLODELOLW\

3K\VLFDOORFDWLRQDQGOHJDOMXULVGLFWLRQ 7KHORFDWLRQVDWZKLFKFRQVXPHUGDWDLVVWRUHGSURFHVVHGDQGPDQDJHGIURPPXVWEH LGHQWLILHGVRWKDWRUJDQLVDWLRQVFDQXQGHUVWDQGWKHOHJDOFLUFXPVWDQFHVLQZKLFKWKHLUGDWD FRXOGEHDFFHVVHGZLWKRXWWKHLUFRQVHQW 3XEOLFVHFWRURUJDQLVDWLRQVZLOODOVRQHHGWRXQGHUVWDQGKRZGDWDKDQGOLQJFRQWUROVZLWKLQ WKHVHUYLFHDUHHQIRUFHGUHODWLYHWR8.OHJLVODWLRQ,QDSSURSULDWHSURWHFWLRQRIFRQVXPHU GDWDFRXOGUHVXOWLQOHJDODQGUHJXODWRU\VDQFWLRQRUUHSXWDWLRQDOGDPDJH

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGXQGHUVWDQG ZKDWFRXQWULHVWKHLUGDWDZLOOEHVWRUHGSURFHVVHGDQGPDQDJHGIURPDQGKRZWKLV DIIHFWVWKHLUFRPSOLDQFHZLWKUHOHYDQWOHJLVODWLRQHJ'DWD3URWHFWLRQ$FW'3$ ZKHWKHUWKHOHJDOMXULVGLFWLRQV WKDWWKHVHUYLFHSURYLGHURSHUDWHVZLWKLQDUHDFFHSWDEOH WRWKHP

,PSOHPHQWDWLRQDSSURDFKHV

6HUYLFHSURYLGHUDVVHUWLRQ 3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQDSSURDFKHV

,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV 3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV

&RQWUDFWXDOFRPPLWPHQW 3OHDVHUHIHUWR&RQWUDFWXDOFRPPLWPHQWIURPWKHOLVWRIFRPPRQDSSURDFKHV

$GGLWLRQDOQRWHV

$Q\FHQWUDOJRYHUQPHQWGHSDUWPHQWZLVKLQJWRRIIVKRUHGDWDRUPDNHXVHRIDFORXG VHUYLFHZLWKGDWDVWRUDJHSURFHVVLQJRUPDQDJHPHQWRIIVKRUHQHHGVDJUHHPHQWIURP &DELQHW2IILFH&RQWDFWWKH2IILFHRIWKH*RYHUQPHQW6,522*6,52 IRULQIRUPDWLRQ 2*6,52#FDELQHWRIILFHJVLJRYXN 'DWDSURWHFWLRQOHJLVODWLRQZLOODSSO\LISHUVRQDOGDWDLVSURFHVVHGLQDFORXGVHUYLFH7KH ,&2KDVSXEOLVKHGJXLGDQFHRQFRPSOLDQFHZLWKWKH'DWD3URWHFWLRQ$FW'3$ LQ UHODWLRQWRXVLQJFORXGVHUYLFHV7KH'3$UHTXLUHVWKDWSHUVRQDOGDWD³VKDOOQRWEH WUDQVIHUUHGWRDQ\FRXQWU\RUWHUULWRU\RXWVLGHWKH(XURSHDQ(FRQRPLF$UHD(($ XQOHVV WKDWFRXQWU\RUWHUULWRU\HQVXUHVDQDGHTXDWHOHYHORISURWHFWLRQIRUWKHULJKWVDQGIUHHGRPV RIGDWDVXEMHFWVLQUHODWLRQWRWKHSURFHVVLQJRISHUVRQDOGDWD´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

'DWDFHQWUHVHFXULW\ 7KHORFDWLRQVXVHGWRSURYLGHFORXGVHUYLFHVQHHGSK\VLFDOSURWHFWLRQDJDLQVW XQDXWKRULVHGDFFHVVWDPSHULQJWKHIWRUUHFRQILJXUDWLRQRIV\VWHPV,QDGHTXDWH SURWHFWLRQVPD\UHVXOWLQWKHGLVFORVXUHDOWHUDWLRQRUORVVRIGDWD

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHFRQILGHQWWKDWWKHSK\VLFDOVHFXULW\PHDVXUHVHPSOR\HGE\WKH SURYLGHUDUHVXIILFLHQWIRUWKHLULQWHQGHGXVHRIWKHVHUYLFH



&RQWUDFWXDOFRPPLWPHQW 3OHDVHUHIHUWR&RQWUDFWXDOFRPPLWPHQWRIDVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV

,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV 'HVFULSWLRQ

*XLGDQFH

$QXPEHURIVHFXULW\VWDQGDUGVDQG FHUWLILFDWLRQVZKLFKFDQLQFOXGHSK\VLFDO VHFXULW\H[LVW7KHVHLQFOXGH &6$&&0Y ,62,(& 66$(,6$(

6WDQGDUGVGLIIHULQWHUPVRIWKHLUOHYHORIGHWDLODURXQGSK\VLFDO FRQWUROV7KHVFRSHRIWKHDVVHVVPHQWPXVWEHUHOHYDQWWRORFDWLRQV ZKHUHFRQVXPHUGDWDFDQEHDFFHVVHG

'DWDDWUHVWSURWHFWLRQ &RQVXPHUGDWDVKRXOGEHSURWHFWHGZKHQVWRUHGRQDQ\W\SHRIPHGLDRUVWRUDJHZLWKLQD VHUYLFHWRHQVXUHWKDWLWLVQRWDFFHVVLEOHE\ORFDOXQDXWKRULVHGSDUWLHV:LWKRXW DSSURSULDWHPHDVXUHVLQSODFHGDWDPD\EHLQDGYHUWHQWO\GLVFORVHGRQGLVFDUGHGORVWRU VWROHQPHGLD

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGKDYHVXIILFLHQWFRQILGHQFHWKDWVWRUDJHPHGLDFRQWDLQLQJWKHLUGDWDLV SURWHFWHGIURPXQDXWKRULVHGDFFHVV

,PSOHPHQWDWLRQDSSURDFKHV 6HUYLFHSURYLGHUVFRXOGXVHHQFU\SWLRQRUSK\VLFDOVHFXULW\FRQWUROVRUDFRPELQDWLRQRI ERWKWRSURWHFWGDWDDWUHVWZLWKLQWKHVHUYLFH

6HUYLFHSURYLGHUDVVHUWLRQ 'HVFULSWLRQ

*XLGDQFH

7KHVHUYLFHSURYLGHUDVVHUWVWKDWWKH\FRQWURODFFHVVWRPHGLDDQG

(UURUVLQKDQGOLQJRIXQHQFU\SWHG

VWRUDJHGHYLFHVKROGLQJFRQVXPHUGDWDRUXVHDSSURSULDWH FU\SWRJUDSKLFSURWHFWLRQV

PHGLDPD\H[SRVHFRQVXPHUGDWD (UURUVLQXVHRIFU\SWRJUDSK\RUSRRU NH\PDQDJHPHQWPD\H[SRVH FRQVXPHUGDWD


*XLGDQFH

$QXPEHURIVWDQGDUGVDUHDSSURSULDWHWRYDOLGDWH SURFHGXUHVVXUURXQGLQJSK\VLFDOVHFXULW\RIPHGLD ZLWKVXSSRUWLQJFHUWLILFDWLRQPHFKDQLVPVH[LVW 7KHVHLQFOXGH &6$&&0Y ,62,(& 66$(,6$(

'LIIHUHQWSK\VLFDOVHFXULW\VWDQGDUGVGLIIHULQWHUPVRIWKH OHYHOVRISK\VLFDOFRQWUROV7KHVFRSHRIWKHDVVHVVPHQW PXVWEHUHOHYDQWWRWKRVHORFDWLRQVZKHUHFRQVXPHUGDWD FDQEHDFFHVVHG

$VVXUHGFRPSRQHQWV 'HVFULSWLRQ

*XLGDQFH

$SURGXFWDVVHVVHGWR)RXQGDWLRQ*UDGHFRQILJXUHGDQGXVHGLQ DFFRUGDQFHZLWKWKHDSSURSULDWH6HFXULW\3URFHGXUHVFDQSURYLGH DVVXUHGGDWDDWUHVWSURWHFWLRQ

7KHVHUYLFHSURYLGHUGHPRQVWUDWHVWKDWNH\ PDQDJHPHQWSURFHGXUHVDUHLQSODFHWR SUHYHQWXQDXWKRULVHGDFFHVV

$GGLWLRQDOQRWHV 7RVXSSRUWRQERDUGLQJDQGRIIERDUGLQJSURFHVVHVLWPD\EHQHFHVVDU\IRUVWRUDJHPHGLD WREHWUDQVIHUUHGEHWZHHQWKHFRQVXPHUDQGWKHVHUYLFHSURYLGHU,IWKLVLVWKHFDVHWKH VWRUDJHPHGLDVKRXOGEHSURWHFWHGXVLQJRQHRIWKHDSSURDFKHVDERYH

'DWDVDQLWLVDWLRQ 7KHSURFHVVRISURYLVLRQLQJPLJUDWLQJDQGGHSURYLVLRQLQJUHVRXUFHVVKRXOGQRWUHVXOWLQ XQDXWKRULVHGDFFHVVWRFRQVXPHUGDWD,QDGHTXDWHVDQLWLVDWLRQRIGDWDFRXOGUHVXOWLQ &RQVXPHUGDWDEHLQJUHWDLQHGE\WKHVHUYLFHSURYLGHULQGHILQLWHO\ &RQVXPHUGDWDEHLQJDFFHVVLEOHWRRWKHUFRQVXPHUVRIWKHVHUYLFHDVUHVRXUFHVDUH UHXVHG &RQVXPHUGDWDEHLQJORVWRUGLVFORVHGRQGLVFDUGHGORVWRUVWROHQPHGLD

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHVXIILFLHQWO\FRQILGHQWWKDW 7KHLUGDWDLVHUDVHGZKHQUHVRXUFHVDUHPRYHGRUUHSURYLVLRQHGZKHQWKH\OHDYHWKH VHUYLFHRUZKHQWKH\UHTXHVWLWWREHHUDVHG 6WRUDJHPHGLDZKLFKKDVKHOGFRQVXPHUGDWDLVVDQLWLVHGRUVHFXUHO\GHVWUR\HGDWWKH HQGRILWVOLIH




,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV 9DOLGDWLRQRIDVVHUWLRQVVKRXOGEHXVHGWRYHULI\UREXVWSURFHVVHVDUHLQSODFHWRHQVXUH DOOPHGLDLVVXEMHFWWRDVDQLWLVDWLRQSURFHVV

,QGHSHQGHQWWHVWLQJRILPSOHPHQWDWLRQ 'HVFULSWLRQ

*XLGDQFH

,QGHSHQGHQWWHVWHUVGHPRQVWUDWHWKDWFRQVXPHUVFDQ¶WDFFHVVUHPQDQWV IURPRWKHUFRQVXPHUVZKHQXVLQJWKHVHUYLFH8VHVSHFLDOLVWVZLWK IRUHQVLFVNLOOVDQGTXDOLILFDWLRQV

7HVWLQJVKRXOGGHPRQVWUDWHWKH VDQLWLVDWLRQSURFHVVHQVXUHVGDWD FDQQRWEHUHFRYHUHG


*XLGDQFH

$)RXQGDWLRQ*UDGHDVVXUHGSURGXFWLVXVHGWRSHUIRUPVDQLWLVDWLRQRIPHGLD EHIRUHGLVSRVDO3URGXFWVVKRXOGKDYH)RXQGDWLRQ*UDGHFHUWLILFDWLRQDJDLQVWWKH UHOHYDQW'DWD'HVWUXFWLRQ6HFXULW\&KDUDFWHULVWLF$OWHUQDWLYHO\DFHUWLILHG GHVWUXFWLRQVHUYLFHVXFKDVWKRVHFHUWLILHGXQGHUWKH&(6*$VVXUHG6HUYLFH 'HVWUXFWLRQ VFKHPHFRXOGEHXVHG

7KHSURGXFWPXVWEHXVHG LQDFFRUGDQFHZLWKWKH UHOHYDQW6HFXULW\ 3URFHGXUHV $Q\FRQVWUDLQWVRQWKH

GHVWUXFWLRQVHUYLFHVXFKDV WKHW\SHRIPHGLDLWLV DSSURYHGWRKDQGOH VKRXOG EHDSSURSULDWHWRLWVXVH

(TXLSPHQWGLVSRVDO 2QFHHTXLSPHQWXVHGWRGHOLYHUDVHUYLFHUHDFKHVWKHHQGRILWVXVHIXOOLIHLWVKRXOGEH GLVSRVHGRILQDZD\WKDWGRHVQRWFRPSURPLVHWKHVHFXULW\RIWKHVHUYLFHRUFRQVXPHU GDWDVWRUHGLQWKHVHUYLFH

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHVXIILFLHQWO\FRQILGHQWWKDW $OOHTXLSPHQWSRWHQWLDOO\FRQWDLQLQJFRQVXPHUGDWDFUHGHQWLDOVRUFRQILJXUDWLRQ LQIRUPDWLRQIRUWKHVHUYLFHLVLGHQWLILHGDWWKHHQGRILWVOLIHRUSULRUWREHLQJUHF\FOHG $Q\FRPSRQHQWVFRQWDLQLQJVHQVLWLYHGDWDDUHVDQLWLVHGUHPRYHGRUGHVWUR\HGDV DSSURSULDWH $FFRXQWVRUFUHGHQWLDOVVSHFLILFWRUHGXQGDQWHTXLSPHQWDUHUHYRNHGWRUHGXFHWKHLU YDOXHWRDQDWWDFNHU




,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV $QXPEHURIVHFXULW\VWDQGDUGVZLWKVXSSRUWLQJFHUWLILFDWLRQPHFKDQLVPVH[LVWZKLFKDUH UHOHYDQWWRWKHREMHFWLYHV7KHVHLQFOXGH &6$&&0Y ,62,(&


*XLGDQFH

$FHUWLILHGGHVWUXFWLRQVHUYLFHVXFKDVWKRVHFHUWLILHG XQGHUWKH&(6*$VVXUHG6HUYLFH'HVWUXFWLRQ VFKHPHFRXOGEHXVHG

$Q\FRQVWUDLQWVRQWKHGHVWUXFWLRQVHUYLFHVXFKDVWKH W\SHRIPHGLDLWLVDSSURYHGWRKDQGOH VKRXOGEH DSSURSULDWHWRLWVXVH

3K\VLFDOUHVLOLHQFHDQGDYDLODELOLW\ 6HUYLFHVKDYHYDU\LQJOHYHOVRIUHVLOLHQFHZKLFKZLOODIIHFWWKHLUDELOLW\WRRSHUDWHQRUPDOO\ LQWKHHYHQWRIIDLOXUHVLQFLGHQWVRUDWWDFNV$VHUYLFHZLWKRXWJXDUDQWHHVRIDYDLODELOLW\ PD\EHFRPHXQDYDLODEOHSRWHQWLDOO\IRUSURORQJHGSHULRGVZLWKDWWHQGDQWEXVLQHVV LPSDFWV

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHVXIILFLHQWO\FRQILGHQWWKDWWKHDYDLODELOLW\FRPPLWPHQWVRIWKH VHUYLFHLQFOXGLQJWKHLUDELOLW\WRUHFRYHUIURPRXWDJHVPHHWVWKHLUEXVLQHVVQHHGV


6HUYLFHSURYLGHUDVVHUWLRQ 7KHVHUYLFHSURYLGHUPD\SURYLGHKLVWRULFDOHYLGHQFHRIWKHDYDLODELOLW\RIWKHVHUYLFH &RQVXPHUVVKRXOGHYDOXDWHWKHHYLGHQFHDQGGUDZWKHLURZQFRQFOXVLRQVRQZKHWKHUWKH KLVWRULFDOHYLGHQFHWKHVHUYLFHSURYLGHU¶VDVVHUWLRQVDQGUHSXWDWLRQRIWKHVHUYLFHSURYLGHU JLYHWKHPVXIILFLHQWFRQILGHQFH+DYLQJQRFRQWUDFWXDOFRPPLWPHQWLQSODFHFRXOGPHDQ WKHUHLVQRSHQDOW\IRUVHUYLFHSURYLGHUVLQWKHFDVHRIDQRXWDJHRUREOLJDWLRQIRUWKH VHUYLFHSURYLGHUWRSURPSWO\UHVROYHWKHLVVXH

&RQWUDFWXDOFRPPLWPHQW &RQWUDFWXDOFRPPLWPHQWVRU6HUYLFH/HYHO$JUHHPHQWV6/$V SURYLGHDPHFKDQLVPIRU FRPSHQVDWLRQLQHYHQWRIRXWDJHVEXWRXWDJHVZLOOQRWEHSUHYHQWHGLIWKHVHUYLFHGHVLJQ LVQRWDSSURSULDWH&RQVLGHUDWLRQRIWKHVXSSOLHU¶VWHFKQLFDOUHVLOLHQFHDQGKLVWRULFDO SHUIRUPDQFHLVVWLOOUHFRPPHQGHG

,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV

3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV

$GGLWLRQDOQRWHV &RQVXPHUVVKRXOGHYDOXDWHZKHWKHUWKHVHUYLFHSURYLGHUFDQPHHWWKHDYDLODELOLW\DQG UHVLOLHQFHUHTXLUHPHQWVRIWKHLUDSSOLFDWLRQ6HUYLFHVSURFXUHGZLWKµEHVWHQGHDYRXUV¶ VXSSRUWVKRXOGEHFRQVLGHUHGWRKDYHQRJXDUDQWHHGVXSSRUW

3ULQFLSOH6HSDUDWLRQEHWZHHQFRQVXPHUV 1RWH)RUGHWDLOHGLQIRUPDWLRQRQWKHLPSRUWDQFHRIVHSDUDWLRQUHTXLUHPHQWVLQFORXG VHUYLFHVSOHDVHUHIHUWRWKH6HSDUDWLRQ*XLGH

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

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOG XQGHUVWDQGWKHW\SHVRIFRQVXPHUWKH\VKDUHWKHVHUYLFHRUSODWIRUPZLWK KDYHFRQILGHQFHWKDWWKHVHUYLFHSURYLGHVVXIILFLHQWVHSDUDWLRQRIWKHLUGDWDDQGVHUYLFH IURPRWKHUFRQVXPHUVRIWKHVHUYLFH KDYHFRQILGHQFHWKDWWKHLUPDQDJHPHQWRIWKHVHUYLFHLVNHSWVHSDUDWHIURPRWKHU FRQVXPHUVFRYHUHGVHSDUDWHO\DVSDUWRI3ULQFLSOH

,PSOHPHQWDWLRQDSSURDFKHV 1RWHWKDWFRPELQDWLRQVRIWKHIROORZLQJDSSURDFKHVFDQEHFRPSOHPHQWDU\DQGSURYLGH

JUHDWHUFRQILGHQFHLQWKHVWUHQJWKRIVHSDUDWLRQZLWKLQWKHVHUYLFH



*XLGDQFH

3HQHWUDWLRQWHVWLQJFDQKHOS GHWHUPLQHZKHWKHURQH FRQVXPHUFDQDIIHFWWKH VHUYLFHRIDQRWKHUFRQVXPHU 8VHDSSURSULDWHO\TXDOLILHG SHQHWUDWLRQWHVWHUV)RU H[DPSOHLQGLYLGXDOVFHUWLILHG XQGHUWKH&+(&.&5(67RU 7LJHUVFKHPHV

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

$VVXUDQFHLQVHUYLFHGHVLJQ 3OHDVHUHIHUWR$VVXUDQFHLQWKHVHUYLFHGHVLJQIURPWKHOLVWRIFRPPRQDSSURDFKHV


*XLGDQFH

3URGXFWVDVVXUHGWR)RXQGDWLRQ*UDGH DUHXVHGWRVHSDUDWHFRQVXPHUVZLWKLQ WKHVHUYLFH3URGXFWVVKRXOGEH FHUWLILHGDJDLQVWDUHOHYDQW6HFXULW\ &KDUDFWHULVWLF

6HUYHU9LUWXDOLVDWLRQ6HFXULW\&KDUDFWHULVWLFVDUHDYDLODEOHEXWWKHUHDUH QR6HFXULW\&KDUDFWHULVWLFVDYDLODEOH\HWIRUYLUWXDOLVHGVHSDUDWLRQRI QHWZRUNLQJRUVWRUDJHHQYLURQPHQWV7KHUHIRUHWKLVDSSURDFKVKRXOGEH XVHGDORQJVLGHRWKHUDVVXUDQFHPHFKDQLVPV 'XHWRWKHEHVSRNHQDWXUHRIPRVW3DD6DQG6DD6RIIHULQJVLWLV XQOLNHO\WKDWDVVXUHGFRPSRQHQWVZLOOEHDYDLODEOHWRSURYLGH VHSDUDWLRQZLWKLQWKRVHVHUYLFHVPHDQLQJWKDWEHVSRNHDVVXUDQFHPD\ EHUHTXLUHGLQRUGHUIRUD3DD6RU6DD6RIIHULQJWRFODLPLWXVHVDVVXUHG FRPSRQHQWV

$GGLWLRQDOQRWHV 7KHPRVWLPSRUWDQWIDFWRUVLQIRUPLQJWKHOHYHORIDVVXUDQFHUHTXLUHGLQWKHVHSDUDWLRQRID VHUYLFHDUHOLNHO\WREHWKHFRQVXPHU¶VLQWHQGHGXVHRIWKHVHUYLFHDQGWKHGHSOR\PHQW PRGHORIWKHVHUYLFH7KHIROORZLQJDGYLFHPD\KHOSLQIRUPWKHVHSDUDWLRQUHTXLUHPHQWVRI

FRQVXPHUV )RUSULYDWHFORXGVHUYLFHVRQO\OLPLWHGDVVXUDQFHLQWKHVHSDUDWLRQRIWKHVHUYLFHLV OLNHO\WREHQHFHVVDU\DVDVLQJOHRUJDQLVDWLRQVKRXOGEHDEOHWRKDYHDJRRG XQGHUVWDQGLQJRIDOORIWKHLUDSSOLFDWLRQVIRUWKHLUFORXGHQYLURQPHQW )RUFRPPXQLW\FORXGVHUYLFHVZKHUHWKHFRPPXQLW\LVWUXVWHGE\WKHFRQVXPHUDQG WKHFRPPXQLW\PHPEHUVDUHNQRZQWRSUDFWLFHDJRRGOHYHORIK\JLHQHSHUKDSVHYHQ ERXQGE\DFRGHRISUDFWLFH WKHQLWLVHQYLVDJHGWKDWDZHOOVFRSHGSHQHWUDWLRQWHVWLV OLNHO\WREHVXIILFLHQWDVVXUDQFHIRUPRVWFRQVXPHUV )RUSXEOLFFORXGVHUYLFHVFRQVXPHUVVKRXOGFRQVLGHUWKHVWUHQJWKRIVHSDUDWLRQ UHTXLUHGJLYHQWKDWRWKHUFRQVXPHUVRIWKHVHUYLFHPD\EHDFWLYHO\KRVWLOHWRZDUGV WKHP,IDKLJKHUOHYHORIFRQILGHQFHLVQHHGHGLQDGGLWLRQWRSHQHWUDWLRQWHVWLQJLWPD\ EHGHVLUDEOHWRJDLQDVVXUDQFHLQWKHGHVLJQRIWKHVHUYLFHRUWRFKRRVHSXEOLFFORXG VHUYLFHVZKLFKPDNHXVHRIDVVXUHGFRPSRQHQWVZKHUHWKHVHDUHDYDLODEOH

3ULQFLSOH*RYHUQDQFHIUDPHZRUN 'HVFULSWLRQ*RYHUQDQFHIUDPHZRUN 7KHVHUYLFHSURYLGHUVKRXOGKDYHDVHFXULW\JRYHUQDQFHIUDPHZRUNWKDWFRRUGLQDWHVDQG GLUHFWVWKHLURYHUDOODSSURDFKWRWKHPDQDJHPHQWRIWKHVHUYLFHDQGLQIRUPDWLRQZLWKLQLW :KHQSURFXULQJDFORXGVHUYLFHHQVXUHWKDWWKHVXSSOLHUKDVDVXLWDEOHVHFXULW\ JRYHUQDQFHIUDPHZRUNLQSODFH5HJDUGOHVVRIDQ\WHFKQLFDOFRQWUROVGHSOR\HGE\WKH VXSSOLHUFRQWUROVZLOOEHIXQGDPHQWDOO\XQGHUPLQHGLIRSHUDWLQJRXWVLGHDQHIIHFWLYHULVN PDQDJHPHQWDQGJRYHUQDQFHUHJLPH$JRYHUQDQFHIUDPHZRUNZLOOHQVXUHWKDW SURFHGXUHSHUVRQQHOSK\VLFDODQGWHFKQLFDOFRQWUROVUHPDLQHIIHFWLYHWKURXJKWKHOLIHWLPH RIWKHVHUYLFHLQUHVSRQVHWRFKDQJHVLQWKHVHUYLFHDQGFKDQJHVLQWKUHDWDQG WHFKQRORJ\GHYHORSPHQWV *RRGJRYHUQDQFHZLOOW\SLFDOO\SURYLGH $FOHDUO\LGHQWLILHGDQGQDPHGERDUGUHSUHVHQWDWLYHRUDSHUVRQZLWKWKHGLUHFW GHOHJDWHGDXWKRULW\ ZKRLVUHVSRQVLEOHIRUWKHVHFXULW\RIWKHFORXGVHUYLFH7KLVLV W\SLFDOO\VRPHRQHZLWKWKHWLWOH&KLHI6HFXULW\2IILFHU&KLHI,QIRUPDWLRQ2IILFHURU&KLHI 7HFKQLFDO2IILFHU $GRFXPHQWHGIUDPHZRUNIRUVHFXULW\JRYHUQDQFHZLWKSROLFLHVJRYHUQLQJNH\DVSHFWV RILQIRUPDWLRQVHFXULW\UHODWLQJWRWKHVHUYLFH 6HFXULW\DQGLQIRUPDWLRQVHFXULW\DVSDUWRIWKHVHUYLFHSURYLGHU¶VILQDQFLDODQG RSHUDWLRQDOULVNUHSRUWLQJPHFKDQLVPV 3URFHVVHVWRLGHQWLI\DQGHQVXUHFRPSOLDQFHZLWKDSSOLFDEOHOHJDODQGUHJXODWRU\

UHTXLUHPHQWVUHODWLQJWRWKHVHUYLFH

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHUVKRXOGKDYHVXIILFLHQWFRQILGHQFHWKDWWKHJRYHUQDQFHIUDPHZRUNDQG SURFHVVHVLQSODFHIRUWKHVHUYLFHDUHDSSURSULDWHIRUWKHLULQWHQGHGXVHRILW

,PSOHPHQWDWLRQDSSURDFKHV 6HUYLFHSURYLGHUDVVHUWLRQ 3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQDSSURDFKHV


*XLGDQFH

$QXPEHURIVWDQGDUGVFRYHULQJVHFXULW\JRYHUQDQFHZLWK VXSSRUWLQJFHUWLILFDWLRQPHFKDQLVPVH[LVW7KHVHLQFOXGH &6$&&0Y ,62,(&

3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRI DVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV

3ULQFLSOH2SHUDWLRQDOVHFXULW\ 'HVFULSWLRQ2SHUDWLRQDOVHFXULW\ 7KHVHUYLFHSURYLGHUVKRXOGKDYHSURFHVVHVDQGSURFHGXUHVLQSODFHWRHQVXUHWKH RSHUDWLRQDOVHFXULW\RIWKHVHUYLFH7KHVHUYLFHZLOOQHHGWREHRSHUDWHGDQGPDQDJHG VHFXUHO\LQRUGHUWRLPSHGHGHWHFWRUSUHYHQWDWWDFNVDJDLQVWLW7KHDVSHFWVWRFRQVLGHU FRPSULVH &RQILJXUDWLRQDQGFKDQJHPDQDJHPHQWHQVXULQJWKDWFKDQJHVWRWKHV\VWHPGRQRW XQH[SHFWHGO\DOWHUVHFXULW\SURSHUWLHVDQGKDYHEHHQSURSHUO\WHVWHGDQGDXWKRULVHG 9XOQHUDELOLW\PDQDJHPHQWHQVXULQJWKDWVHFXULW\LVVXHVLQFRQVWLWXHQWFRPSRQHQWVDUH LGHQWLILHGDQGPLWLJDWHG 3URWHFWLYHPRQLWRULQJWDNLQJPHDVXUHVWRGHWHFWDWWDFNVDQGXQDXWKRULVHGDFWLYLW\RQ WKHVHUYLFH ,QFLGHQWPDQDJHPHQWHQVXULQJWKHVHUYLFHFDQUHVSRQGWRLQFLGHQWVDQGUHFRYHUD

VHFXUHDYDLODEOHVHUYLFH *RRGRSHUDWLRQDOVHFXULW\VKRXOGQRWUHTXLUHFRPSOH[EXUHDXFUDWLFWLPHFRQVXPLQJRU H[SHQVLYHSURFHVVHV,QFRQMXQFWLRQZLWKJRRGGHYHORSPHQWSUDFWLFHVVHH3ULQFLSOH LWLV SRVVLEOHWRFRPELQHDJLOHDQGUHVSRQVLYHGHYHORSPHQWZLWKDSSURSULDWHVHFXULW\FRQWUROV

&RQILJXUDWLRQDQGFKDQJHPDQDJHPHQW *RRGFRQILJXUDWLRQPDQDJHPHQWSURFHVVHVVKRXOGHQVXUHWKDWNQRZOHGJHRIWKHDVVHWV ZKLFKPDNHXSWKHVHUYLFHDORQJZLWKWKHLUFRQILJXUDWLRQDQGGHSHQGHQFLHVDUHNQRZQ DQGDFFXUDWH*RRGFKDQJHPDQDJHPHQWSURFHVVHVVKRXOGHQVXUHDQ\FKDQJHVWRWKH VHUYLFHZKLFKFRXOGKDYHDQHIIHFWRQLWVVHFXULW\ DUHLGHQWLILHGDQGPDQDJHG7KH\ VKRXOGDOVROHDGWRGHWHFWLRQRIXQDXWKRULVHGFKDQJHV,QDVHUYLFHZKHUHFKDQJHLVQRW HIIHFWLYHO\PDQDJHGFKDQJHVPD\XQZLWWLQJO\LQWURGXFHRUIDLOWRIXOO\PLWLJDWH VHFXULW\ YXOQHUDELOLWLHVLQWKHVHUYLFH

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGKDYHFRQILGHQFHWKDW 7KHVWDWXVORFDWLRQDQGFRQILJXUDWLRQRIVHUYLFHFRPSRQHQWVLQFOXGLQJKDUGZDUHDQG VRIWZDUHFRPSRQHQWV DUHWUDFNHGWKURXJKRXWWKHLUOLIHWLPHZLWKLQWKHVHUYLFH &KDQJHVWRWKHVHUYLFHDUHDVVHVVHGIRUSRWHQWLDOVHFXULW\LPSDFW&KDQJHVDUH PDQDJHGDQGWUDFNHGWKURXJKWRFRPSOHWLRQ




*XLGDQFH

$QXPEHURIVWDQGDUGVDUHDSSURSULDWH WRVXSSRUWFRQILJXUDWLRQDQGFKDQJH PDQDJHPHQWSURFHVVHVLQOLQHZLWKWKH REMHFWLYHV7KHVHKDYHWKHLURZQ VXSSRUWLQJFHUWLILFDWLRQPHFKDQLVPV $SSURSULDWHVWDQGDUGVLQFOXGH &6$&&0Y ,62,(&

*RRGFKDQJHDQGFRQILJXUDWLRQPDQDJHPHQWSURFHVVHVUHGXFHEXWGR QRWHOLPLQDWH WKHFKDQFHRIYXOQHUDELOLWLHVEHLQJLQWURGXFHGLQWKH FRQILJXUDWLRQRIDVHUYLFH&KDQJHDQGFRQILJXUDWLRQPDQDJHPHQWLV FORVHO\WLHGWRJRRGJRYHUQDQFH:LWKRXWJRRGJRYHUQDQFHRIWKH VHUYLFHVHH3ULQFLSOH LWLVOLNHO\WKDWFKDQJHDQGFRQILJXUDWLRQ PDQDJHPHQWSUDFWLFHVZLOOQRWEHHIIHFWLYH

$GGLWLRQDOQRWHV $OWKRXJKLWLVLPSRUWDQWIRUWKHUHWREHHIIHFWLYHFKDQJHDQGFRQILJXUDWLRQPDQDJHPHQWRI VHUYLFHVVHUYLFHVZLWKLQVXIILFLHQWO\DJLOHFKDQJHSURFHVVHVPD\H[SRVHWKHLUVHUYLFHWR VHFXULW\ULVNVIRUORQJHUSHULRGVRIWLPHWKDQWKRVHZLWKUREXVWSULRULWLVDWLRQSURFHVVHV

9XOQHUDELOLW\PDQDJHPHQW 2FFDVLRQDOO\YXOQHUDELOLWLHVZLOOEHGLVFRYHUHGZKLFKLIOHIWXQPLWLJDWHGZLOOSRVHDQ XQDFFHSWDEOHULVNWRWKHVHUYLFH5REXVWYXOQHUDELOLW\PDQDJHPHQWSURFHVVHVDUHUHTXLUHG WRLGHQWLI\WULDJHDQGPLWLJDWHYXOQHUDELOLWLHV6HUYLFHVZKLFKGRQRWKDYHHIIHFWLYH YXOQHUDELOLW\PDQDJHPHQWSURFHVVHVZLOOTXLFNO\EHFRPHYXOQHUDEOHWRDWWDFNOHDYLQJ WKHPDWULVNRIH[SORLWDWLRQXVLQJSXEOLFO\NQRZQPHWKRGVDQGWRROV

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




*XLGDQFH

$QXPEHURIVWDQGDUGVDUHDSSURSULDWHWRVXSSRUWYXOQHUDELOLW\ PDQDJHPHQWLQOLQHZLWKWKHREMHFWLYHV7KHVHKDYHWKHLURZQ VXSSRUWLQJFHUWLILFDWLRQPHFKDQLVPV$SSURSULDWHVWDQGDUGVLQFOXGH ,62,(& &6$&&0Y ,62,(&

1RYXOQHUDELOLW\PDQDJHPHQWSURFHVV FDQGHIHQGDJDLQVWXQNQRZQµ]HURGD\¶ YXOQHUDELOLWLHV &RQVXPHUVDUHDGYLVHGWRVHHNVHUYLFHV ZKLFKVXSSRUWSDWFKLQJRUYXOQHUDELOLW\ PDQDJHPHQWZLWKLQWKHWLPHVFDOHVVHW RXWEHORZ

$GGLWLRQDOQRWHV ([SORLWVIRUNQRZQYXOQHUDELOLWLHVDUHQRZIUHTXHQWO\ZLGHO\DYDLODEOHZLWKLQKRXUVRUGD\V RIUHOHDVH2UJDQLVDWLRQVWKDWPLWLJDWHDQGSDWFKYXOQHUDELOLWLHVLQWKHLUVHUYLFHVTXLFNO\ KDYHVPDOOHUZLQGRZVRIYXOQHUDELOLW\,IWKHUHLVHYLGHQFHWRVXJJHVWWKDWDYXOQHUDELOLW\LV EHLQJDFWLYHO\H[SORLWHGLQWKHZLOGVHUYLFHSURYLGHUVZLOOQHHGWRDFWTXLFNO\WRSXW PLWLJDWLRQVLQSODFHWRSURWHFWWKHLUFRQVXPHUV,IWKHUHLVQRHYLGHQFHWKDWWKHYXOQHUDELOLW\ LVEHLQJDFWLYHO\H[SORLWHGWKHQWKHIROORZLQJWLPHVFDOHVVKRXOGEHFRQVLGHUHGPLQLPXP JRRGSUDFWLFH µ&ULWLFDO¶SDWFKHVGHSOR\HGZLWKLQFDOHQGDUGD\VRIDSDWFKEHFRPLQJDYDLODEOH µ,PSRUWDQW¶SDWFKHVGHSOR\HGZLWKLQFDOHQGDUGD\VRIDSDWFKEHFRPLQJDYDLODEOH µ2WKHU¶SDWFKHVGHSOR\HGZLWKLQFDOHQGDUGD\VRIDSDWFKEHFRPLQJDYDLODEOH µ&ULWLFDO¶µ,PSRUWDQW¶DQGµ2WKHU¶DUHDOLJQHGWRWKHIROORZLQJFRPPRQYXOQHUDELOLW\VFRULQJ V\VWHPV 1DWLRQDO9XOQHUDELOLW\'DWDEDVH9XOQHUDELOLW\6HYHULW\UDWLQJVµ+LJK¶µ0HGLXP¶DQG µ/RZ¶UHVSHFWLYHO\WKHVHLQWXUQDUHDOLJQHGWR&966VFRUHVDVVHWRXWE\1,67 0LFURVRIW¶V6HFXULW\%XOOHWLQ6HYHULW\5DWLQJ6\VWHPUDWLQJVµ&ULWLFDO¶µ,PSRUWDQW¶DQG WKHWZRUHPDLQLQJOHYHOVµ0RGHUDWH¶DQGµ/RZ¶ UHVSHFWLYHO\ &RQVXPHUVDUHDGYLVHGWRXQGHUVWDQGZKHWKHUVHUYLFHSURYLGHU¶VYXOQHUDELOLW\ PDQDJHPHQWSURFHVVHVDSSO\DYDLODEOHSDWFKHVZLWKLQDFFHSWDEOHWLPHVFDOHV 1RVHUYLFHLVOLNHO\WREHIUHHIURPYXOQHUDELOLWLHV:LWKLQPRVWFORXGVHUYLFHVWKHUHDUH OLNHO\WREHDUHDVZKHUHDVLQJOHYXOQHUDELOLW\GLVFRYHUHGLQWKHVHUYLFHZRXOGEUHDNWKH VHSDUDWLRQSURWHFWLRQVPDNLQJLWSRVVLEOHIRURQHPDOLFLRXVRUFRPSURPLVHGFRQVXPHUWR JDLQDFFHVVWRGDWDRUGLVUXSWWKHVHUYLFHRIDQRWKHU7KHUHIRUHWKHGHSOR\PHQWPRGHOIRU WKHVHUYLFHHVVHQWLDOO\ZKRLWLVVKDUHGZLWK ZLOOEHDQLPSRUWDQWFRQVLGHUDWLRQDVZLOOWKH VHUYLFHSURYLGHU¶VDELOLW\WRGHWHFWPDOLFLRXVDFWLYLW\DQGDOVRTXLFNO\PLWLJDWHHPHUJLQJ YXOQHUDELOLWLHV

3URWHFWLYHPRQLWRULQJ

(IIHFWLYHSURWHFWLYHPRQLWRULQJDOORZVDVHUYLFHSURYLGHUWRGHWHFWDQGUHVSRQGWR DWWHPSWHGDQGVXFFHVVIXODWWDFNVPLVXVHDQGPDOIXQFWLRQ$VHUYLFHZKLFKGRHVQRW HIIHFWLYHO\PRQLWRUIRUDWWDFNVDQGPLVXVHZLOOEHXQOLNHO\WRGHWHFWDWWDFNVERWKVXFFHVVIXO DQGXQVXFFHVVIXO DQGZLOOEHXQDEOHWRTXLFNO\UHVSRQGWRSRWHQWLDOFRPSURPLVHVRI FRQVXPHUHQYLURQPHQWVDQGGDWD

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGKDYHFRQILGHQFHWKDW (YHQWVJHQHUDWHGLQVHUYLFHFRPSRQHQWVUHTXLUHGWRVXSSRUWHIIHFWLYHLGHQWLILFDWLRQRI VXVSLFLRXVDFWLYLW\DUHFROOHFWHGDQGIHGLQWRDQDQDO\VLVV\VWHP (IIHFWLYHDQDO\VLVV\VWHPVDUHLQSODFHWRLGHQWLI\DQGSULRULWLVHLQGLFDWLRQVRISRWHQWLDO PDOLFLRXVDFWLYLW\




*XLGDQFH

$QXPEHURIVWDQGDUGVDUHDSSURSULDWHWRVXSSRUWSURWHFWLYHPRQLWRULQJLQ OLQHZLWKWKHREMHFWLYHV7KHVHKDYHWKHLURZQVXSSRUWLQJFHUWLILFDWLRQ PHFKDQLVPV$SSURSULDWHVWDQGDUGVLQFOXGH &6$&&0Y ,62,(&

3OHDVHUHIHUWR,QGHSHQGHQW YDOLGDWLRQRIDVVHUWLRQVIURPWKH OLVWRIFRPPRQDSSURDFKHV

$GGLWLRQDOQRWHV 6HUYLFHVZKLFKGRQRWFROOHFWUHOHYDQWDFFRXQWLQJDQGDXGLWLQIRUPDWLRQDUHXQOLNHO\WR GHWHFWDQGUHVSRQGTXLFNO\WRDWWDFNVRUDWWHPSWHGDWWDFNV:KHUHDWWDFNVDUHGHWHFWHG WKURXJKRWKHUPHFKDQLVPVLWZLOOEHGLIILFXOWWRLGHQWLI\WKHH[WHQWGXUDWLRQDQGVHYHULW\RI FRPSURPLVHLIUHOHYDQWDXGLWGDWDLVQRWDYDLODEOH 6HUYLFHVZKLFKFROOHFWDFFRXQWLQJDQGDXGLWLQIRUPDWLRQEXWGRQRWKDYHHIIHFWLYHDQDO\VLV RIWKDWLQIRUPDWLRQDUHXQOLNHO\WRGHWHFWDQGUHVSRQGTXLFNO\WRDWWDFNVRUDWWHPSWHG

DWWDFNV$XGLWGDWDZKLFKKDVEHHQFROOHFWHGEXWQRWDQDO\VHGPD\EHIRXQGWREH LQFRPSOHWHRULQDGHTXDWHZKHQH[DPLQHGGXULQJLQYHVWLJDWLRQRIDQLQFLGHQW 6HUYLFHSURYLGHUVDUHRQO\OLNHO\WREHDEOHWRPRQLWRUWKHVHUYLFHVWKH\KDYHGHVLJQHGDQG DUHPDQDJLQJ,Q,DD6DQG3DD6VHUYLFHVZKHUHFRQVXPHUVDUHUXQQLQJWKHLURZQ DSSOLFDWLRQVRUVRIWZDUHRQWRSRIWKHVHUYLFHVHUYLFHSURYLGHUVDUHXQOLNHO\WREHDEOHWR SURYLGHHIIHFWLYHSURWHFWLYHPRQLWRULQJIRUWKHDSSOLFDWLRQVRUVRIWZDUHXQOHVVWKH FRQVXPHUDQGVHUYLFHSURYLGHUKDYHZRUNHGWRJHWKHUWRGHVLJQDSSURSULDWHSURWHFWLYH PRQLWRULQJ 0RUHW\SLFDOO\LQWKHVHVFHQDULRVLWLVWKHFRQVXPHUZKRZLOOEHUHVSRQVLEOH DQGRIWHQEHVWSODFHG WRLGHQWLI\DWWDFNVDJDLQVWWKHLUDSSOLFDWLRQVRUVRIWZDUHHJ WKURXJKWKHLURZQDSSOLFDWLRQPRQLWRULQJ

,QFLGHQWPDQDJHPHQW $QLQFLGHQWPDQDJHPHQWSURFHVVDOORZVDVHUYLFHSURYLGHUWRUHVSRQGWRDZLGHUDQJHRI XQH[SHFWHGHYHQWVWKDWDIIHFWWKHGHOLYHU\RIWKHVHUYLFHWRFRQVXPHUV8QOHVVFDUHIXOO\ SUHSODQQHGLQFLGHQWPDQDJHPHQWSURFHVVHVDUHLQSODFHSRRUGHFLVLRQVDUHOLNHO\WREH PDGHZKHQLQFLGHQWVGRRFFXU *RRGLQFLGHQWPDQDJHPHQWPLQLPLVHVWKHLPSDFWWRFRQVXPHUVRIHQYLURQPHQWDOVHFXULW\ DQGUHOLDELOLW\LVVXHVZLWKWKHVHUYLFH7KHVHSURFHVVHVQHHGQ¶WEHFRPSOH[RUUHTXLUH ODUJHDPRXQWVRIGHVFULSWLRQEXWDVHUYLFHZKLFKGRHVQRWKDYHHIIHFWLYHSURFHVVHVLQ SODFHPD\EHPRUHYXOQHUDEOHWRRXWDJHVDQGVHFXULW\LQFLGHQWV'HOD\HGUHVSRQVHWRDQ\ LQFLGHQWLVOLNHO\WRLQFUHDVHLWVGXUDWLRQDQGLPSDFWWRFRQVXPHUV

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGKDYHFRQILGHQFHWKDW ,QFLGHQWPDQDJHPHQWSURFHVVHVDUHLQSODFHIRUWKHVHUYLFHDQGDUHHQDFWHGLQ UHVSRQVHWRVHFXULW\LQFLGHQWV 3UHGHILQHGSURFHVVHVDUHLQSODFHIRUUHVSRQGLQJWRFRPPRQW\SHVRILQFLGHQWDQG DWWDFN $GHILQHGSURFHVVDQGFRQWDFWURXWHH[LVWVIRUUHSRUWLQJRIVHFXULW\LQFLGHQWVE\ FRQVXPHUVDQGH[WHUQDOHQWLWLHV 6HFXULW\LQFLGHQWVRIUHOHYDQFHWRWKHPZLOOEHUHSRUWHGWRWKHPLQDFFHSWDEOH WLPHVFDOHVDQGIRUPDW


6HUYLFHSURYLGHUDVVHUWLRQ

3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQDSSURDFKHV


*XLGDQFH

$QXPEHURIVWDQGDUGVDUHDSSURSULDWHWRVXSSRUWLQFLGHQWPDQDJHPHQWLQ OLQHZLWKWKHREMHFWLYHV7KHVHKDYHWKHLURZQVXSSRUWLQJFHUWLILFDWLRQ PHFKDQLVPV$SSURSULDWHVWDQGDUGVLQFOXGH ,62,(& &6$&&0Y ,62,(&

3OHDVHUHIHUWR,QGHSHQGHQW YDOLGDWLRQRIDVVHUWLRQVIURPWKH OLVWRIFRPPRQDSSURDFKHV

$GGLWLRQDOQRWHV 'HSDUWPHQWVSXEOLVKLQJVHUYLFHVWKDWPD\EHWKHVXEMHFWRIVLJQLILFDQWDWWDFNVLQWHUPVRI YROXPHRUWHFKQLFDOFDSDELOLW\ VKRXOGXVHSURYLGHUVWKDWFDQGHPRQVWUDWHUREXVWZHOO WHVWHGDQGUHKHDUVHGLQFLGHQWPDQDJHPHQWSURFHGXUHV'HQLDORIVHUYLFHDWWDFNVDJDLQVW SXEOLFIDFLQJLQIUDVWUXFWXUHE\µKDFNWLYLVW¶JURXSVRUVHULRXVFULPLQDOVIRUILQDQFLDOJDLQFDQ EHDSDUWLFXODUO\GHPDQGLQJWHVWRILQFLGHQWUHVSRQVHSURFHVVHVHVSHFLDOO\IRUFRQVXPHUV ZLWKDKLJKDYDLODELOLW\UHTXLUHPHQW

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

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHFRQWHQWZLWKWKHOHYHORIVHFXULW\VFUHHQLQJFRQGXFWHGRQVHUYLFH

SURYLGHUVWDIIZLWKDFFHVVWRWKHLULQIRUPDWLRQRUZLWKDELOLW\WRDIIHFWWKHLUVHUYLFH


'HVFULSWLRQ

*XLGDQFH

6HUYLFH SURYLGHU DVVHUWLRQ

,ISHUVRQQHODUHFKHFNHGDJDLQVWDUHFRJQLVHG SHUVRQQHOVHFXULW\VWDQGDUGWKHQWKLVVKRXOGEH VSHFLILHG$OWHUQDWLYHO\VHUYLFHSURYLGHUVVKRXOG GHVFULEHWKHSHUVRQQHOVHFXULW\VFUHHQLQJIXQFWLRQV FDUULHGRXWRQVWDIIZLWKDFFHVVWRFRQVXPHUGDWDRU DELOLW\WRDIIHFWWKHVHUYLFHRIFRQVXPHUV

7KHGLIIHUHQWSHUVRQQHOVHFXULW\ VWDQGDUGVSURYLGHGLIIHUHQWOHYHOVRI FRQILGHQFHLQWKHWUXVWZRUWKLQHVVRI LQGLYLGXDOV%6IRU LQGLYLGXDOVLQSULYLOHJHGUROHVZRXOG PHHWWKHREMHFWLYHDERYH :KHUHVHUYLFHSURYLGHUVDUHXQDEOH WRYHULI\WKHLGHQWLW\XQVSHQWFULPLQDO FRQYLFWLRQVDQGULJKWWRZRUNRIVWDII WKHUHLVDQLQFUHDVHGLQVLGHUWKUHDW

,QGHSHQGHQW YDOLGDWLRQRI DVVHUWLRQV

$QXPEHURIVWDQGDUGVDUHDSSURSULDWHWRVXSSRUW SHUVRQQHOVHFXULW\VFUHHQLQJLQOLQHZLWKWKHREMHFWLYHV 7KHVHKDYHWKHLURZQVXSSRUWLQJFHUWLILFDWLRQ PHFKDQLVPV$SSURSULDWHVWDQGDUGVLQFOXGH %6 8.%366RU6&FOHDUDQFHV

7KHGLIIHUHQWSHUVRQQHOVHFXULW\ VWDQGDUGVSURYLGHGLIIHUHQWOHYHOVRI FRQILGHQFHLQWKHWUXVWZRUWKLQHVVRI LQGLYLGXDOV%6IRU LQGLYLGXDOVLQSULYLOHJHGUROHVZRXOG PHHWWKHREMHFWLYHDERYH

$GGLWLRQDOQRWHV ,WLVGLIILFXOWWRGHVLJQV\VWHPVWRGHIHQGGDWDDJDLQVWDVNLOOHGDQGPRWLYDWHGSULYLOHJHG XVHU&RQVXPHUVVKRXOGXQGHUVWDQGWKDWSULYLOHJHGXVHUVZLWKLQWKHVHUYLFHSURYLGHUDUH OLNHO\WREHDEOHWRJDLQDFFHVVWRWKHLUGDWDRUDIIHFWWKHUHOLDELOLW\RIWKHLUVHUYLFH :KHUHVHUYLFHSURYLGHUVDUHXQDEOHWRPHHWWKHREMHFWLYHVFRQVXPHUVDUHDGYLVHGWR XQGHUVWDQGZK\WKDWLVWKHFDVHDQGXVHWKDWLQIRUPDWLRQZLWKLQWKHLUULVNPDQDJHPHQW GHFLVLRQ &31,SURYLGHVJXLGDQFHRQSUHHPSOR\PHQWVFUHHQLQJ

3ULQFLSOH6HFXUHGHYHORSPHQW 'HVFULSWLRQ6HFXUHGHYHORSPHQW 6HUYLFHVVKRXOGEHGHVLJQHGDQGGHYHORSHGWRLGHQWLI\DQGPLWLJDWHWKUHDWVWRWKHLU VHFXULW\

6HUYLFHVZKLFKDUHQRWGHVLJQHGVHFXUHO\PD\EHYXOQHUDEOHWRVHFXULW\LVVXHVZKLFK FRXOGFRPSURPLVHFRQVXPHUGDWDFDXVHORVVRIVHUYLFHRUHQDEOHRWKHUPDOLFLRXVDFWLYLW\

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGEHVXIILFLHQWO\FRQILGHQWWKDW 1HZDQGHYROYLQJWKUHDWVDUHUHYLHZHGDQGWKHVHUYLFHLPSURYHGLQOLQHZLWKWKHP 'HYHORSPHQWLVFDUULHGRXWLQOLQHZLWKLQGXVWU\JRRGSUDFWLFHUHJDUGLQJVHFXUHGHVLJQ FRGLQJWHVWLQJDQGGHSOR\PHQW &RQILJXUDWLRQPDQDJHPHQWSURFHVVHVDUHLQSODFHWRHQVXUHWKHLQWHJULW\RIWKHVROXWLRQ WKURXJKGHYHORSPHQWWHVWLQJDQGGHSOR\PHQW


'HVFULSWLRQ

*XLGDQFH


$QXPEHURIVHFXULW\VWDQGDUGVH[LVWZKLFKVHUYLFHSURYLGHUV FRXOGFODLPFRQIRUPDQFHZLWKLQVXSSRUWRIWKHLUDVVHUWLRQVRI FRPSOLDQFHZLWKWKHDERYHREMHFWLYHV7KHVHLQFOXGH 6DIHFRGHµ)XQGDPHQWDO3UDFWLFHVIRU6HFXUH6RIWZDUH 'HYHORSPHQW¶ ,62,(&

3OHDVHUHIHUWR6HUYLFH SURYLGHUDVVHUWLRQIURPWKHOLVW RIFRPPRQDSSURDFKHV


$QXPEHURIVHFXULW\VWDQGDUGVZLWKVXSSRUWLQJFHUWLILFDWLRQ PHFKDQLVPVH[LVWZKLFKFRXOGEHXVHGWRGHPRQVWUDWH FRQIRUPDQFHZLWKWKHDERYHREMHFWLYHV7KHVHLQFOXGH &(6*&3$%XLOG6WDQGDUG ,62,(& ,62,(& &6$&&0Y

3OHDVHUHIHUWR,QGHSHQGHQW YDOLGDWLRQRIDVVHUWLRQVIURP WKHOLVWRIFRPPRQ DSSURDFKHV

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

SRWHQWLDODWWDFNVZKLOVWILQGLQJWKHULJKWEDODQFHRIVHFXULW\FRVWDQGQHHGVRIWKHXVHUV 6HUYLFHSURYLGHUVVKRXOGHQVXUHWKDWZKHQWKH\SXUFKDVHVHUYLFHVVRIWZDUHFRPSRQHQWV RUGHYHORSPHQWVHUYLFHVIURPWKLUGSDUWLHVWKDWWKHVHFXUHGHYHORSPHQWSUDFWLFHVRIWKH VXSSOLHUPDWFKWKHLUUHTXLUHPHQWVWKURXJKWKHLUVXSSO\FKDLQSURFHVVVHHEHORZ

3ULQFLSOH6XSSO\FKDLQVHFXULW\ 'HVFULSWLRQ6XSSO\FKDLQVHFXULW\ 7KHVHUYLFHSURYLGHUVKRXOGHQVXUHWKDWLWVVXSSO\FKDLQVDWLVIDFWRULO\VXSSRUWVDOORIWKH VHFXULW\SULQFLSOHVWKDWWKHVHUYLFHFODLPVWRLPSOHPHQW &ORXGVHUYLFHVRIWHQUHO\XSRQWKLUGSDUW\SURGXFWVDQGVHUYLFHV7KRVHWKLUGSDUWLHVFDQ KDYHDQLPSDFWRQWKHRYHUDOOVHFXULW\RIWKHVHUYLFHV,IWKLVSULQFLSOHLVQRWLPSOHPHQWHG WKHQLWLVSRVVLEOHWKDWVXSSO\FKDLQFRPSURPLVHFDQXQGHUPLQHWKHVHFXULW\RIWKHVHUYLFH DQGDIIHFWWKHLPSOHPHQWDWLRQRIRWKHUVHFXULW\SULQFLSOHV

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHUXQGHUVWDQGVDQGDFFHSWV +RZWKHLULQIRUPDWLRQLVVKDUHGZLWKRUDFFHVVLEOHE\WKLUGSDUW\VXSSOLHUVDQGWKHLU VXSSO\FKDLQV +RZWKHVHUYLFHSURYLGHU¶VSURFXUHPHQWSURFHVVHVSODFHVHFXULW\UHTXLUHPHQWVRQWKLUG SDUW\VXSSOLHUVDQGGHOLYHU\SDUWQHUV +RZWKHVHUYLFHSURYLGHUPDQDJHVVHFXULW\ULVNVIURPWKLUGSDUW\VXSSOLHUVDQGGHOLYHU\ SDUWQHUV +RZWKHVHUYLFHSURYLGHUPDQDJHVWKHFRQIRUPDQFHRIWKHLUVXSSOLHUVZLWKVHFXULW\ UHTXLUHPHQWV +RZWKHVHUYLFHSURYLGHUYHULILHVWKDWKDUGZDUHDQGVRIWZDUHXVHGLQWKHVHUYLFHLV JHQXLQHDQGKDVQRWEHHQWDPSHUHGZLWK

,PSOHPHQWDWLRQDSSURDFKHV 6HUYLFHSURYLGHUDVVHUWLRQ 3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQDSSURDFKHV


'HVFULSWLRQ

*XLGDQFH

$QXPEHURIVHFXULW\VWDQGDUGVZLWKVXSSRUWLQJ FHUWLILFDWLRQPHFKDQLVPVH[LVW7KHVHLQFOXGH ,62,(& ,623$6

3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV IURPWKHOLVWRIFRPPRQDSSURDFKHV

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

3ULQFLSOH6HFXUHFRQVXPHUPDQDJHPHQW 'HVFULSWLRQ6HFXUHFRQVXPHUPDQDJHPHQW &RQVXPHUVVKRXOGEHSURYLGHGZLWKWKHWRROVUHTXLUHGWRKHOSWKHPVHFXUHO\PDQDJHWKHLU VHUYLFH0DQDJHPHQWLQWHUIDFHVDQGSURFHGXUHVDUHDYLWDOVHFXULW\EDUULHULQSUHYHQWLQJ XQDXWKRULVHGSHRSOHDFFHVVLQJDQGDOWHULQJFRQVXPHUV¶UHVRXUFHVDSSOLFDWLRQVDQGGDWD 7KHDVSHFWVWRFRQVLGHUFRPSULVH $XWKHQWLFDWLRQRIFRQVXPHUVWRPDQDJHPHQWLQWHUIDFHVDQGZLWKLQVXSSRUWFKDQQHOV 6HSDUDWLRQDQGDFFHVVFRQWUROZLWKLQPDQDJHPHQWLQWHUIDFHV

$XWKHQWLFDWLRQRIFRQVXPHUVWRPDQDJHPHQWLQWHUIDFHVDQG ZLWKLQVXSSRUWFKDQQHOV ,QRUGHUWRPDLQWDLQDVHFXUHVHUYLFHFRQVXPHUVQHHGWREHVHFXUHO\DXWKHQWLFDWHGEHIRUH

EHLQJDOORZHGWRSHUIRUPPDQDJHPHQWDFWLYLWLHVUHSRUWIDXOWVRUUHTXHVWFKDQJHVWRWKH VHUYLFH7KHVHDFWLYLWLHVPD\EHFRQGXFWHGWKURXJKDVHUYLFHPDQDJHPHQWZHESRUWDORU WKURXJKRWKHUVXSSRUWFKDQQHOVVXFKDVWHOHSKRQHRUHPDLO DQGDUHOLNHO\WRIDFLOLWDWH IXQFWLRQVVXFKDVSURYLVLRQLQJQHZVHUYLFHHOHPHQWVPDQDJLQJXVHUDFFRXQWVDQG PDQDJLQJFRQVXPHUGDWD,WLVLPSRUWDQWWKDWVHUYLFHSURYLGHUVHQVXUHDQ\PDQDJHPHQW UHTXHVWVZKLFKFRXOGKDYHDVHFXULW\LPSDFWDUHSHUIRUPHGRYHUVHFXUHDQGDXWKHQWLFDWHG FKDQQHOV,IFRQVXPHUVDUHQRWVWURQJO\DXWKHQWLFDWHGWKHQDQDWWDFNHUSRVLQJDVWKHP FRXOGSHUIRUPSULYLOHJHGDFWLRQVXQGHUPLQLQJWKHVHFXULW\RIWKHLUVHUYLFHRUGDWD

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHU +DVVXIILFLHQWFRQILGHQFHWKDWRQO\DXWKRULVHGLQGLYLGXDOVIURPWKHFRQVXPHU RUJDQLVDWLRQDUHDEOHWRDXWKHQWLFDWHWRDQGDFFHVVPDQDJHPHQWLQWHUIDFHVIRUWKH VHUYLFH3ULQFLSOHVKRXOGEHXVHGDVVHVVWKHULVNVRIGLIIHUHQWDSSURDFKHVWRPHHW WKLVREMHFWLYH +DVVXIILFLHQWFRQILGHQFHWKDWRQO\DXWKRULVHGLQGLYLGXDOVIURPWKHFRQVXPHU RUJDQLVDWLRQDUHDEOHWRSHUIRUPDFWLRQVDIIHFWLQJWKHFRQVXPHU¶VVHUYLFHWKURXJK VXSSRUWFKDQQHOV



,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQV 3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV


*XLGDQFH

6RFLDOHQJLQHHULQJWHFKQLTXHVFDQEHXVHGWRWHVWWKH HIIHFWLYHQHVVRIFRQVXPHUDGPLQLVWUDWRUDXWKHQWLFDWLRQLQ VXSSRUWFKDQQHOV

7KLVIRUPRIWHVWLQJZLOOH[HUFLVHDXWKHQWLFDWLRQ PHFKDQLVPVLQVXSSRUWFKDQQHOVDWDSRLQWLQ WLPH 1RUHFRJQLVHGVWDQGDUGVH[LVWWRDVVHVVWKH TXDOLW\RIVRFLDOHQJLQHHULQJWHVWLQJ

6HSDUDWLRQDQGDFFHVVFRQWUROZLWKLQPDQDJHPHQWLQWHUIDFHV 0DQ\FORXGVHUYLFHVDUHPDQDJHGYLDZHEDSSOLFDWLRQVRU$3,V7KHVHLQWHUIDFHVDUHD NH\SDUWRIWKHVHUYLFH¶VVHFXULW\,IFRQVXPHUVDUHQRWDGHTXDWHO\VHSDUDWHGZLWKLQ PDQDJHPHQWLQWHUIDFHVWKHQRQHFRQVXPHUPD\EHDEOHWRDIIHFWWKHVHUYLFHRUPRGLI\ GDWDEHORQJLQJWRDQRWKHU &RQVXPHUV¶SULYLOHJHGDGPLQLVWUDWLYHDFFRXQWVDUHOLNHO\WRKDYHDFFHVVWRODUJHYROXPHV RIGDWD&RQVWUDLQLQJWKHSHUPLVVLRQVUHTXLUHGE\LQGLYLGXDOXVHUVWRWKRVHDEVROXWHO\ QHFHVVDU\FDQKHOSWROLPLWWKHGDPDJHWKDWFRXOGEHFDXVHGE\DPDOLFLRXVXVHU FRPSURPLVHGFUHGHQWLDOVRUGHYLFH5ROHEDVHGDFFHVVFRQWUROSURYLGHVDPHFKDQLVPWR DFKLHYHWKLV,WLVOLNHO\WREHDSDUWLFXODUO\LPSRUWDQWFDSDELOLW\IRUFRQVXPHUVPDQDJLQJ ODUJHUGHSOR\PHQWV ([SRVLQJPDQDJHPHQWLQWHUIDFHVWROHVVDFFHVVLEOHQHWZRUNVHJFRPPXQLW\UDWKHUWKDQ SXEOLFQHWZRUNV PDNHVLWPRUHGLIILFXOWIRUDWWDFNHUVWRUHDFKDQGDWWDFNWKHPDVWKH\ ZRXOGILUVWQHHGWRJDLQDFFHVVWRWKHV\VWHPVRIRQHRIWKHFRQVXPHUVRUQHWZRUNV *XLGDQFHRQDVVHVVLQJWKHULVNVRIH[SRVLQJLQWHUIDFHVWRGLIIHUHQWQHWZRUNVLVSURYLGHG XQGHU3ULQFLSOH

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHU +DVVXIILFLHQWFRQILGHQFHWKDWRWKHUFRQVXPHUVFDQQRWDFFHVVPRGLI\RURWKHUZLVH DIIHFWWKHLUVHUYLFHPDQDJHPHQW &DQPDQDJHWKHULVNVRIWKHLURZQSULYLOHJHGDFFHVVHJWKURXJKµSULQFLSOHRIOHDVW SULYLOHJH¶SURYLGLQJWKHDELOLW\WRFRQVWUDLQSHUPLVVLRQVJLYHQWRFRQVXPHU DGPLQLVWUDWRUV 8QGHUVWDQGVKRZPDQDJHPHQWLQWHUIDFHVDUHSURWHFWHGVHH3ULQFLSOH DQGZKDW IXQFWLRQDOLW\LVDYDLODEOHYLDWKRVHLQWHUIDFHV


6HUYLFHSURYLGHUDVVHUWLRQ 3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRIFRPPRQDSSURDFKHV)RU JXLGDQFHRQWKHULVNVRIH[SRVLQJWKHPDQDJHPHQWLQWHUIDFHWRGLIIHUHQWQHWZRUNVUHIHUWR 3ULQFLSOH


3OHDVHUHIHUWR,QGHSHQGHQWYDOLGDWLRQRIDVVHUWLRQVIURPWKHOLVWRIFRPPRQDSSURDFKHV


*XLGDQFH

3HQHWUDWLRQWHVWLQJFDQEH XVHGWRDVVHVVWKHVWUHQJWKRI VHSDUDWLRQZLWKLQWKHFRQVXPHU PDQDJHPHQWLQWHUIDFH $SSURSULDWHO\TXDOLILHG SHQHWUDWLRQWHVWHUVVKRXOGEH XVHG)RUH[DPSOHLQGLYLGXDOV FHUWLILHGXQGHUWKH&+(&. &5(67RU7LJHUVFKHPHV

$ZHOOVFRSHGSHQHWUDWLRQWHVWDQGLPSOHPHQWDWLRQRILWVUHFRPPHQGDWLRQV FDQJLYHFRQILGHQFHWKDWPDQDJHPHQWLQWHUIDFHVSUHYHQWRQHFRQVXPHUIURP PDQDJLQJWKHVHUYLFHRIDQRWKHUFRQVXPHU,WZLOODOVRQRUPDOO\GHWHFWFRPPRQ RUSXEOLFDOO\NQRZQZHDNQHVVHVRUYXOQHUDELOLWLHVLQWKHWHVWHGFRPSRQHQWVDW WKHWLPHRIWKHWHVW $SHQHWUDWLRQWHVWZLOOQRWQRUPDOO\DVVHVVSURGXFWVRUFRPSRQHQWVIRU SUHYLRXVO\XQNQRZQYXOQHUDELOLWLHV

3ULQFLSOH,GHQWLW\DQGDXWKHQWLFDWLRQ 'HVFULSWLRQ,GHQWLW\DQGDXWKHQWLFDWLRQ &RQVXPHUDQGVHUYLFHSURYLGHUDFFHVVWRDOOVHUYLFHLQWHUIDFHVVKRXOGEHFRQVWUDLQHGWR DXWKHQWLFDWHGDQGDXWKRULVHGLQGLYLGXDOV $OOFORXGVHUYLFHVZLOOKDYHVRPHUHTXLUHPHQWWRLGHQWLI\DQGDXWKHQWLFDWHXVHUVZLVKLQJWR DFFHVVVHUYLFHLQWHUIDFHV:HDNDXWKHQWLFDWLRQRUDFFHVVFRQWUROPD\DOORZXQDXWKRULVHG FKDQJHVWRDFRQVXPHU¶VVHUYLFHWKHIWRUPRGLILFDWLRQRIGDWDRUGHQLDORIVHUYLFH ,WLVDOVRLPSRUWDQWWKDWDXWKHQWLFDWLRQRFFXUVRYHUVHFXUHFKDQQHOV8VHRILQVHFXUH FKDQQHOVVXFKDVHPDLO+773RUWHOHSKRQHFDQEHPRUHYXOQHUDEOHWRLQWHUFHSWLRQRU VRFLDOHQJLQHHULQJDWWDFNV

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVVKRXOGKDYHVXIILFLHQWFRQILGHQFHWKDWLGHQWLW\DQGDXWKHQWLFDWLRQFRQWUROV HQVXUHXVHUVDUHDXWKRULVHGWRDFFHVVVSHFLILFLQWHUIDFHV


'HVFULSWLRQ

6HUYLFHSURYLGHU

3OHDVHUHIHUWR6HUYLFHSURYLGHU

*XLGDQFH

DVVHUWLRQ

DVVHUWLRQIURPWKHOLVWRIFRPPRQ DSSURDFKHV

8VHUQDPHDQGWZR IDFWRUDXWKHQWLFDWLRQ

8VHUVDXWKHQWLFDWHXVLQJD XVHUQDPHDQGKDUGZDUHRU VRIWZDUHWRNHQRUµRXWRIEDQG¶ FKDOOHQJHHJ606

7KHUHPD\EHYXOQHUDELOLWLHVLQWKHDXWKHQWLFDWLRQ VFKHPHRULPSOHPHQWDWLRQZKLFKDOORZ XQDXWKRULVHGDFFHVV 6WDQGDUGLVHGRUDVVXUHGDXWKHQWLFDWLRQVFKHPHV JLYHLQGHSHQGHQWFRQILGHQFHWKHGHVLJQDQG LPSOHPHQWDWLRQLVUREXVW

8VHUQDPHDQG 7/6FOLHQWFHUWLILFDWH

7KHVHUYLFHVXSSRUWVDXWKHQWLFDWLRQ XVLQJD7/6FOLHQWFHUWLILFDWH LVVXHGE\WKHVHUYLFHRUE\WKH FRQVXPHURUJDQLVDWLRQ

6HFXULW\LVUHOLDQWRQFRQVXPHUHQGXVHUGHYLFHV WRVHFXUHO\PDQDJHFHUWLILFDWHVWKHUHZLOOEHD QHHGIRUSURFHVVHVWRUHYRNHORVWRU FRPSURPLVHGFUHGHQWLDOV 7KHUHPD\EHYXOQHUDELOLWLHVLQWKHDXWKHQWLFDWLRQ VFKHPHRULPSOHPHQWDWLRQZKLFKDOORZ XQDXWKRULVHGDFFHVV

$XWKHQWLFDWLRQ IHGHUDWLRQ

7KHVHUYLFHVXSSRUWVIHGHUDWLQJWR DQRWKHUDXWKHQWLFDWLRQVFKHPH VXFKDVDFRUSRUDWHGLUHFWRU\DQ 2$XWKRU6$0/SURYLGHU

)HGHUDWHGLGHQWLW\VROXWLRQVDFTXLUHWKHULVNVRI WKHVRXUFHLGHQWLW\VROXWLRQ&RPSURPLVHRIWKH VRXUFHLGHQWLW\VROXWLRQZLOOJLYHDFFHVVWRDQ\ UHVRXUFHVSURWHFWHGE\IHGHUDWHGLGHQWLWLHV

/LPLWHGDFFHVV RYHUGHGLFDWHGOLQN HQWHUSULVHRU FRPPXQLW\QHWZRUN

$FFHVVWRDVHUYLFHLVOLPLWHGWRD SURWHFWHGQHWZRUNVXFKDV361D FRUSRUDWHQHWZRUNZLWKSK\VLFDORU FU\SWRJUDSKLFSURWHFWLRQRUD GHGLFDWHGSK\VLFDORUHQFU\SWHG WXQQHO

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

8VHUQDPHDQG SDVVZRUG

8VHUQDPHDQG VWURQJ SDVVZRUGSDVVSKUDVH HQIRUFHPHQW

$XWKHQWLFDWLRQLVYLDEDVLF XVHUQDPHDQGSDVVZRUGZLWKQR FDSDELOLW\IRUFRQVXPHUVWRHQIRUFH WKHXVHRIVWURQJSDVVZRUG VHOHFWLRQ

$XWKHQWLFDWLRQLVZLWKXVHUQDPH DQGSDVVZRUGSDVVSKUDVHZLWKWKH VHUYLFHVXSSRUWLQJHQIRUFHPHQWRI VWURQJSDVVZRUGVHOHFWLRQE\XVHUV

:LWKRXWWKHDELOLW\WRHQIRUFHVHOHFWLRQRIVWURQJ SDVVZRUGVRUSDVVSKUDVHVXVHUVPD\VHOHFW SDVVZRUGVZKLFKDUHYXOQHUDEOHWREUXWHIRUFH DWWDFN 8VHUQDPHVDQGSDVVZRUGVDUHVXVFHSWLEOHWR FRPSURPLVHWKURXJKSKLVKLQJRUPDOZDUHRQHQG XVHUGHYLFHV7KHODFNRIDVHFRQGIDFWRURI DXWKHQWLFDWLRQPHDQVWKH\FDQEHXVHGODWHUE\ DQDWWDFNHUWRJDLQDFFHVVWRWKHVHUYLFH &UHGHQWLDOVSDVVHGRYHUXQHQFU\SWHGFKDQQHOV DUHDWSDUWLFXODUULVNRILQWHUFHSWLRQRQLQVHFXUH QHWZRUNVVXFKDVSXEOLFZLILKRWVSRWV

8VHUQDPHVDQGSDVVZRUGVDUHVXVFHSWLEOHWR FRPSURPLVHWKURXJKSKLVKLQJRUPDOZDUHRQHQG XVHUGHYLFHV7KHODFNRIDVHFRQGIDFWRURI DXWKHQWLFDWLRQPHDQVWKH\FDQEHXVHGODWHUE\ DQDWWDFNHUWRJDLQDFFHVVWRWKHVHUYLFH &UHGHQWLDOVSDVVHGRYHUXQHQFU\SWHGFKDQQHOV DUHDWSDUWLFXODUULVNRILQWHUFHSWLRQRQLQVHFXUH QHWZRUNVVXFKDVSXEOLF:L)LKRWVSRWV

$GGLWLRQDOQRWHV 7KHULVNVDVVRFLDWHGZLWKDFRPSURPLVHGXVHUDFFRXQWZLOOYDU\GHSHQGLQJRQWKH SULYLOHJHVDQGDFFHVVWKDWXVHUKDVEHHQJUDQWHG+LJKO\SULYLOHJHGDFFRXQWVZLWKDFFHVV WRODUJHYROXPHVRIFRQVXPHUGDWDRUWKHDELOLW\WRDOWHUVHUYLFHFRQILJXUDWLRQDQGVHFXULW\ DUHRIKLJKSRWHQWLDOYDOXHWRDQDWWDFNHU:HDNDXWKHQWLFDWLRQRIWKHVHSULYLOHJHGDFFRXQWV LVQRUPDOO\DKLJKHUULVNWKDQWKDWRIUHJXODUVHUYLFHXVHUV 9HU\ORQJSDVVZRUGVFRPSOH[LW\UHTXLUHPHQWVRUFKDQJHIUHTXHQFLHVFDQLQFUHDVHWKH FKDQFHVRIXVHUVKDQGOLQJSDVVZRUGVEDGO\VWRULQJWKHPLQVHFXUHO\VKDULQJRUUHXVLQJ WKHP$OWHUQDWLYHSURWHFWLRQVVXFKDVWZRIDFWRUDXWKHQWLFDWLRQ DUHRIWHQDEHWWHUFKRLFH WKDQUHTXLULQJYHU\ORQJSDVVZRUGV $FWLYHPRQLWRULQJDQGSURWHFWLRQFDQEHDYDOXDEOHDXWKHQWLFDWLRQULVNPLWLJDWLRQ7KH GHWHFWLRQDQGSUHYHQWLRQRIEUXWHIRUFHDWWDFNVWKURXJKORFNLQJEORFNLQJRUUDWHOLPLWLQJ DWWHPSWVSURYLGHVXVHIXOPLWLJDWLRQDQGGHWHFWLRQ 3URYLGLQJULVNEDVHGWULJJHUVVXFKDVDVNLQJIRUUHDXWKHQWLFDWLRQIRUVLJQLILFDQWDFWLRQVRU GHPDQGLQJDGGLWLRQDODXWKHQWLFDWLRQLQIRUPDWLRQIURPXQNQRZQORFDWLRQVRUGHYLFHV FDQ DOVRKHOSWRGHWHFWDQGPLWLJDWHWKHWKUHDWIURPFRPSURPLVHGFUHGHQWLDOV /LPLWLQJWKHOLIHWLPHRIORJLQVHVVLRQVLVDOVRJRRGSUDFWLFHEXWWKLVVKRXOGQRWEHDWWKH H[SHQVHRIXVDELOLW\5HQGHULQJDVHUYLFHGLIILFXOWWRXVHWKURXJKVKRUWWLPHRXWVFDQ HQFRXUDJHXVHUVWRXVHOHVVVHFXUHDOWHUQDWLYHV

3ULQFLSOH([WHUQDOLQWHUIDFHSURWHFWLRQ 'HVFULSWLRQ([WHUQDOLQWHUIDFHSURWHFWLRQ $OOH[WHUQDORUOHVVWUXVWHGLQWHUIDFHVRIWKHVHUYLFHVKRXOGEHLGHQWLILHGDQGKDYH DSSURSULDWHSURWHFWLRQVWRGHIHQGDJDLQVWDWWDFNVWKURXJKWKHP ,IDQLQWHUIDFHLVH[SRVHGWRFRQVXPHUVRURXWVLGHUVDQGLWLVQRWVXIILFLHQWO\UREXVWWKHQLW FRXOGEHVXEYHUWHGE\DWWDFNHUVLQRUGHUWRJDLQDFFHVVWRWKHVHUYLFHRUGDWDZLWKLQLW,I WKHLQWHUIDFHVH[SRVHGLQFOXGHSULYDWHLQWHUIDFHVVXFKDVPDQDJHPHQWLQWHUIDFHV WKHQ WKHLPSDFWPD\EHPRUHVLJQLILFDQW &RQVXPHUVFDQXVHGLIIHUHQWPRGHOVWRFRQQHFWWRFORXGVHUYLFHVZKLFKH[SRVHWKHLU HQWHUSULVHV\VWHPVWRYDU\LQJOHYHOVRIULVN

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHUXQGHUVWDQGVKRZWRVDIHO\FRQQHFWWRWKHVHUYLFHZKLOVWPLQLPLVLQJULVN WRWKHFRQVXPHU¶VV\VWHPV 7KHFRQVXPHUXQGHUVWDQGVZKDWSK\VLFDODQGORJLFDOLQWHUIDFHVWKHLULQIRUPDWLRQLV DYDLODEOHIURP 7KHFRQVXPHUKDVVXIILFLHQWFRQILGHQFHWKDWSURWHFWLRQVDUHLQSODFHWRFRQWURODFFHVV WRWKHLUGDWD 7KHFRQVXPHUKDVVXIILFLHQWFRQILGHQFHWKDWWKHVHUYLFHFDQGHWHUPLQHWKHLGHQWLW\RI FRQQHFWLQJXVHUVDQGVHUYLFHVWRDQDSSURSULDWHOHYHOIRUWKHGDWDRUIXQFWLRQEHLQJ DFFHVVHG

,PSOHPHQWDWLRQDSSURDFKHV ,QGHSHQGHQWWHVWLQJRILPSOHPHQWDWLRQ 'HVFULSWLRQ

*XLGDQFH

7KHVHUYLFHSURYLGHUSURYLGHVHYLGHQFH WKDWH[WHUQDOLQWHUIDFHVKDYHEHHQ WHVWHGDQGWKDWDOOLQWHUIDFHVH[SRVHG IURPWKHVHUYLFHDUHUREXVWDQG QHFHVVDU\IRUWKHRSHUDWLRQRIWKH VHUYLFH 8VHTXDOLILHGSHQHWUDWLRQWHVWHUV)RU H[DPSOHLQGLYLGXDOVFHUWLILHGXQGHUWKH &+(&.&5(67RU7LJHUVFKHPHV

$ZHOOVFRSHGSHQHWUDWLRQWHVWDQGLPSOHPHQWDWLRQRILWV UHFRPPHQGDWLRQV FDQJLYHFRQILGHQFHWKDWSURGXFWVDQGVHFXULW\ FRQWUROVWHVWHGKDYHEHHQFRQILJXUHGLQDFFRUGDQFHZLWKJRRGSUDFWLFH DQGWKDWWKHUHDUHQRFRPPRQRUSXEOLFDOO\NQRZQZHDNQHVVHVRU YXOQHUDELOLWLHVLQWKHWHVWHGFRPSRQHQWVDWWKHWLPHRIWKHWHVW $SHQHWUDWLRQWHVWZLOOQRWQRUPDOO\DVVHVVSURGXFWVRUFRPSRQHQWVIRU SUHYLRXVO\XQNQRZQYXOQHUDELOLWLHV

$VVXUDQFHLQWKHVHUYLFHGHVLJQ 3OHDVHUHIHUWR$VVXUDQFHLQWKHVHUYLFHGHVLJQIURPWKHOLVWRIFRPPRQDSSURDFKHV

,GHQWLW\DQGDXWKHQWLFDWLRQ 3ULQFLSOHLGHQWLILHVSRVVLEOHDSSURDFKHVWRPHHWLQJLGHQWLILFDWLRQDQGDXWKHQWLFDWLRQ UHTXLUHPHQWV )RUVHUYLFHVDFFHVVLEOHIURPODUJHRUOHVVWUXVWHGQHWZRUNVFRQVXPHUVFDQUHGXFHWKH ULVNVDVVRFLDWHGZLWKXVHUQDPHDQGSDVVZRUGDXWKHQWLFDWLRQE\LPSOHPHQWLQJVWURQJHU DXWKHQWLFDWLRQPHFKDQLVPV

1HWZRUNVDQGDVVRFLDWHGULVNV

6HUYLFHVFDQSURWHFWWKHLUGDWDE\OLPLWLQJWKHDWWDFNHU¶VRSSRUWXQLW\WRFRQQHFWWRLWE\RQO\ SURYLGLQJWKHVHUYLFHWRDOLPLWHGVHWRIQHWZRUNVORFDWLRQVRUGHYLFHV,QWHUQHWDFFHVVLEOH VHUYLFHVSDUWLFXODUO\WKRVHZKLFKZLOODFFHSWFRQQHFWLRQVIURPDQ\ORFDWLRQDUHPRUH H[SRVHGWRDWWDFNHUVVRKDYLQJKLJKFRQILGHQFHLQWKHVWUHQJWKRIDXWKHQWLFDWLRQDQG DFFHVVFRQWUROZLOOEHSDUWLFXODUO\LPSRUWDQW 7\SHRI QHWZRUN DFFHVVLQJWKH FORXGVHUYLFH

$VVRFLDWHGULVN

,QWHUQHW

6LQFHWKHVHUYLFHFDQEHDFFHVVHGIURPDQ\RWKHULQWHUQHWFRQQHFWHGGHYLFHLWPHDQVWKDW DWWDFNHUVFDQODXQFKWKHLUDWWDFNVDWWKHVHUYLFHIURPDQ\ZKHUH,QWHUQHWFRQQHFWHGVHUYLFHV WKHUHIRUHQHHGWRKDYHVWURQJDXWKHQWLFDWLRQDQGDFFHVVFRQWUROPHDVXUHVLQSODFH 6LQFHFRQQHFWLYLW\WRWKHVHUYLFHLVQRWYLDDSURWHFWHGQHWZRUNWKHQDOOUHVSRQVLELOLW\IRU DXWKHQWLFDWLRQDQGHQFU\SWLRQQHHGVWREHSURYLGHGE\WKHVHUYLFHLWVHOI

&RPPXQLW\ QHWZRUN

6RPHFORXGVHUYLFHVSDUWLFXODUO\FRPPXQLW\FORXGVHUYLFHVPD\FRQQHFWGLUHFWO\WRDSULYDWH FRPPXQLW\QHWZRUNVXFKDVWKH361RUYLDDSURWHFWHGWXQQHORQWRWKHFRPPXQLW\QHWZRUN7KLV PRGHOVXSSRUWVHDVLHUGDWDVKDULQJZLWKLQWKHFRPPXQLW\ ,IWKHFORXGVHUYLFHLVGHGLFDWHGIRUWKHFRPPXQLW\DQGRQO\DFFHVVLEOHYLDWKHFRPPXQLW\ QHWZRUNWKHQWKHVHUYLFHLVOLNHO\WREHOHVVH[SRVHGWRUHPRWHDWWDFNHUV

3ULYDWH QHWZRUN

$WWDFNHUVZLVKLQJWRDWWDFNFORXGVHUYLFHVRQO\H[SRVHGWRSULYDWHQHWZRUNVPD\EHIRUFHGWRILUVW FRPSURPLVHDSULYDWHQHWZRUNWRJDLQDFFHVV

3ULQFLSOH6HFXUHVHUYLFHDGPLQLVWUDWLRQ 'HVFULSWLRQ6HFXUHVHUYLFHDGPLQLVWUDWLRQ 7KHPHWKRGVXVHGE\WKHVHUYLFHSURYLGHU¶VDGPLQLVWUDWRUVWRPDQDJHWKHRSHUDWLRQDO VHUYLFHVKRXOGEHGHVLJQHGWRPLWLJDWHDQ\ULVNRIH[SORLWDWLRQWKDWFRXOGXQGHUPLQHWKH VHFXULW\RIWKHVHUYLFH 7KHVHFXULW\RIDFORXGVHUYLFHLVFORVHO\WLHGWRWKHVHFXULW\RIWKHVHUYLFHSURYLGHU¶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

&RPSURPLVHRIWKHPZRXOGKDYHVLJQLILFDQWLPSDFWLQFOXGLQJWKHPHDQVWRE\SDVV VHFXULW\FRQWUROVDQGVWHDORUPDQLSXODWHODUJHYROXPHVRIGDWD ,IWKHVHUYLFHPDQDJHPHQWPRGHOLVQRWNQRZQWKHQLWVKRXOGEHDVVXPHGWKDWWKHKLJK ULVNµGLUHFWVHUYLFHPDQDJHPHQW¶PRGHOGHVFULEHGEHORZLVXVHG

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVKDYHVXIILFLHQWFRQILGHQFHWKDWWKHWHFKQLFDODSSURDFKWKHVHUYLFHSURYLGHU XVHVWRPDQDJHWKHVHUYLFHGRHVQRWSXWWKHLUGDWDRUVHUYLFHDWULVN


'HVFULSWLRQ

*XLGDQFH


3OHDVHUHIHUWR6HUYLFHSURYLGHUDVVHUWLRQIURPWKHOLVWRI FRPPRQDSSURDFKHV

7KHULVNVDVVRFLDWHGZLWKWKHVSHFLILHG VHUYLFHPDQDJHPHQWPRGHO GHVFULEHGEHORZ VKRXOGEH FRQVLGHUHG


7KHDVVHUWLRQVRIWKHVHUYLFHSURYLGHUDORQJZLWKWKH VHUYLFHPDQDJHPHQWPRGHOLQXVHDUHYDOLGDWHG WKURXJKDUHFRJQLVHGDXGLWVFKHPH7KH\LQFOXGH ,62,(& &6$&&0Y

7KHULVNVDVVRFLDWHGZLWKWKHVSHFLILHG VHUYLFHPDQDJHPHQWPRGHO GHVFULEHGEHORZ VKRXOGEH FRQVLGHUHG

5LVNVDVVRFLDWHGZLWKPDQDJHPHQWDSSURDFKHV 0DQDJHPHQW 0RGHO

'HVFULSWLRQ

$VVRFLDWHGULVN

'HGLFDWHG GHYLFHVRQD VHJUHJDWHG QHWZRUN

'HGLFDWHGGHYLFHVIRUVHUYLFH PDQDJHPHQWSXUSRVHVDUHXVHGWR PDQDJHWKHVHUYLFHIURPDVHJUHJDWHG PDQDJHPHQWQHWZRUN 7KHGHYLFHVDUHXVHGVROHO\IRUVHUYLFH PDQDJHPHQWDQGQRWIRUJHQHUDO SXUSRVHXVHVXFKDVHPDLODQGZHE EURZVLQJ

8VLQJWKLVDSSURDFKWKHPDQDJHPHQWGHYLFHVDQG VHJUHJDWHGQHWZRUNDUHGLIILFXOWWRDWWDFN 7KLVDSSURDFKPD\DOVRKHOSVXSSRUWSHUVRQQHO VHFXULW\PHDVXUHVIRUKLJKHUVHFXULW\V\VWHPV)RU H[DPSOHZKHUHWKHVHUYLFHSURYLGHUZLVKHVWR GHPRQVWUDWHWKDWRQO\VWDIIKROGLQJ6HFXULW\ &OHDUDQFH6& KDYHDFFHVVWRV\VWHP DGPLQLVWUDWLRQIXQFWLRQV

'HGLFDWHG GHYLFHVIRU FRPPXQLW\ VHUYLFH PDQDJHPHQW

'HYLFHVDUHGHGLFDWHGWRPDQDJLQJ VHUYLFHVIRUDVLQJOHFRPPXQLW\HJ8. SXEOLFVHFWRU 7KHPDQDJHPHQWQHWZRUN LVVHJUHJDWHGIURPDOORWKHUQHWZRUNV 7KHGHYLFHVDUHXVHGVROHO\IRUVHUYLFH PDQDJHPHQWDQGQRWIRUJHQHUDO SXUSRVHXVHVXFKDVHPDLODQGZHE EURZVLQJ

:KHQPDQDJLQJPXOWLSOHVHUYLFHVWKHUHLVDULVNWKDW DPRUHYXOQHUDEOHVHUYLFHFRXOGEHFRPSURPLVHG DQGXVHGDVDVWDJLQJSODWIRUPWRDWWDFNWKH PDQDJHPHQWQHWZRUN0DQDJLQJVHUYLFHVZLWK VLPLODUVHFXULW\SRVWXUHVZLOOKHOSUHGXFHWKLVULVN 7KLVDSSURDFKPD\DOVRKHOSVXSSRUWSHUVRQQHO VHFXULW\PHDVXUHVIRUKLJKHUVHFXULW\V\VWHPV)RU H[DPSOHZKHUHWKHVHUYLFHSURYLGHUZLVKHVWR

GHPRQVWUDWHWKDWRQO\6&FOHDUHGVWDIIKDYHDFFHVV WRV\VWHPDGPLQLVWUDWLRQIXQFWLRQV 'HGLFDWHG GHYLFHVIRU PXOWLSOH FRPPXQLW\ VHUYLFH PDQDJHPHQW

'HYLFHVDUHGHGLFDWHGWRVHUYLFH PDQDJHPHQWEXWDUHXVHGWRPDQDJH PXOWLSOHVHUYLFHVDFURVVPXOWLSOH FRPPXQLWLHVRIXVHUV 7KHGHYLFHVDUHXVHGVROHO\IRUVHUYLFH PDQDJHPHQWDQGQRWIRUJHQHUDO SXUSRVHXVHVXFKDVHPDLODQGZHE EURZVLQJ

,QWKLVPRGHOWKHGHYLFHVWKHPVHOYHVUHPDLQGLIILFXOW WDUJHWVWRDWWDFNEXWWKHODUJHUDQGZLGHUUDQJLQJ VFRSHRIWKHPDQDJHPHQWQHWZRUNPD\PDNHLW PRUHH[SRVHGWRDWWDFNV

6HUYLFH PDQDJHPHQW YLDEDVWLRQ KRVWV

7KLVPRGHODOVRNQRZQDVµEURZVHXS¶LV ZKHUHDVHUYLFHLVPDQDJHGXVLQJ GHYLFHVIURPDOHVVWUXVWHGQHWZRUNVXFK DVDFRUSRUDWHEXVLQHVVQHWZRUN EXW RQO\E\DXWKRULVHGPDQDJHPHQWVWDII 7KRVHVWDIIKDYHDFFHVVWRVSHFLILF PDQDJHPHQWKRVWVNQRZQDVEDVWLRQV IURPZKLFKDOOPDQDJHPHQWDFWLRQVRQ WKHVHUYLFHDUHFRQGXFWHG

&RUSRUDWHV\VWHPVWHQGWRSURFHVVDZLGHUDQJHRI FRQWHQWW\SHVDQGDUHPRUHYXOQHUDEOHWRDWWDFN XVLQJW\SLFDOWHFKQLTXHV %DVWLRQKRVWVSURYLGHVRPHSURWHFWLRQDJDLQVW WKUHDWVIURPWKHFRUSRUDWHQHWZRUNVEXWDWWDFNHUV ZLWKDFFHVVWRFRUSRUDWHGHYLFHVXVHGE\VHUYLFH DGPLQLVWUDWRUVDUHOLNHO\WRVWLOOEHDEOHWRDFFHVVWKH VHUYLFHPDQDJHPHQWHQYLURQPHQWDVLIWKH\ZHUH OHJLWLPDWHDGPLQLVWUDWRUV0DOZDUHFDSDEOHRI SHUIRUPLQJVHVVLRQKLMDFNLQJLVEHFRPLQJ LQFUHDVLQJO\FRPPRQVRWKHULVNVDVVRFLDWHGZLWK WKLVPRGHODUHLQFUHDVLQJ

'LUHFWVHUYLFH PDQDJHPHQW

7KHVHUYLFHLVPDQDJHGGLUHFWO\IURP GHYLFHVZKLFKDUHDOVRXVHGIRUQRUPDO EXVLQHVVXVHZHEEURZVLQJYLHZLQJ H[WHUQDOHPDLOHWF

,QWKLVPRGHOWKHUHLVOLWWOHSURWHFWLQJWKHVHUYLFH IURPXQDXWKRULVHGDFFHVVWRPDQDJHPHQW LQWHUIDFHV6HUYLFHVPDQDJHGLQWKLVZD\DUHDWD VLJQLILFDQWULVNRIFRPSURPLVH

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¶VµUHJXODU¶DFFRXQWIRUQRQSULYLOHJHGZRUN7KLVUHGXFHV WKHH[SRVXUHRISULYLOHJHGDFFRXQWVDQGUHGXFHVWKHLUULVNRIFRPSURPLVH

3ULQFLSOH$XGLWLQIRUPDWLRQSURYLVLRQWR FRQVXPHUV 'HVFULSWLRQ$XGLWLQIRUPDWLRQSURYLVLRQWRFRQVXPHUV

&RQVXPHUVVKRXOGEHSURYLGHGZLWKWKHDXGLWUHFRUGVWKH\QHHGWRPRQLWRUDFFHVVWRWKHLU VHUYLFHDQGWKHGDWDKHOGZLWKLQLW 7KHW\SHRIDXGLWLQIRUPDWLRQDYDLODEOHWRFRQVXPHUVZLOOKDYHDGLUHFWLPSDFWRQWKHLU DELOLW\WRGHWHFWDQGUHVSRQGWRLQDSSURSULDWHRUPDOLFLRXVXVDJHRIWKHLUVHUYLFHRUGDWD ZLWKLQUHDVRQDEOHWLPHVFDOHV

,PSOHPHQWDWLRQREMHFWLYHV &RQVXPHUVDUH $ZDUHRIWKHDXGLWLQIRUPDWLRQWKDWZLOOEHSURYLGHGWRWKHPKRZDQGZKHQLWZLOOEH PDGHDYDLODEOHWRWKHPWKHIRUPDWRIWKHGDWDDQGWKHUHWHQWLRQSHULRGDVVRFLDWHGZLWK LW &RQILGHQWWKDWWKHDXGLWLQIRUPDWLRQDYDLODEOHZLOODOORZWKHPWRPHHWWKHLUQHHGVIRU LQYHVWLJDWLQJPLVXVHRULQFLGHQWV


'HVFULSWLRQ

*XLGDQFH

1RQH

7KHVHUYLFHSURYLGHUGRHVQRWSURYLGHDXGLW LQIRUPDWLRQWRFRQVXPHUV

)DLOXUHWRSURYLGHDXGLWLQIRUPDWLRQFDQSUHYHQW FRQVXPHUVIURPLGHQWLI\LQJPLVXVHRIWKHLUVHUYLFH DQGGDWD &RQVXPHUVVKRXOGFRQVLGHUZKHWKHUWKHLQDELOLW\ WRGHWHUPLQHKRZZKHQRUZKHUHDVHUYLFHLV DFFHVVHGFRXOGUHVXOWLQOHJDORUUHJXODWRU\LVVXHV

'DWD PDGH DYDLODEOH

7KHVHUYLFHSURYLGHUPDNHVDYDLODEOH VSHFLILFDXGLWGDWDDYDLODEOHWRFRQVXPHUV 7KHWLPHWDEOHPHWKRGIRUPDWDQGUHWHQWLRQ SHULRGRIWKHGDWDLVVSHFLILHG

&RQVXPHUVVKRXOGFRQVLGHUZKHWKHUWKHDXGLWGDWD SURYLGHGE\WKHVHUYLFHSURYLGHULVDGHTXDWHWR VXSSRUWWKHLUQHHGV 7KHSURYLVLRQRIDXGLWLQIRUPDWLRQGRHVQRWLQLWVHOI SURYLGHDQ\SURWHFWLRQWRWKHFRQVXPHU7KH LQIRUPDWLRQZLOOUHTXLUHDQDO\VLVWRXQFRYHU HYLGHQFHRIFRPSURPLVHRUPLVXVH

'DWD PDGH DYDLODEOH E\ QHJRWLDWLRQ

7KHVHUYLFHSURYLGHURIIHUVFRQVXPHUV OLPLWHGDXGLWLQIRUPDWLRQDVDUHVXOWRI QHJRWLDWLRQ

&RQVXPHUVVKRXOGFRQVLGHUZKHWKHUWKHDXGLWGDWD SURYLGHGE\WKHVHUYLFHSURYLGHULVDGHTXDWHWR VXSSRUWWKHLUQHHGV 7KHSURYLVLRQRIDXGLWLQIRUPDWLRQGRHVQRWLQLWVHOI SURYLGHDQ\SURWHFWLRQWRWKHFRQVXPHU7KH LQIRUPDWLRQZLOOUHTXLUHDQDO\VLVWRXQFRYHU HYLGHQFHRIFRPSURPLVHRUPLVXVH

$GGLWLRQDOQRWHV

$XGLWGDWDLVRIOLPLWHGYDOXHXQOHVVLWLVXVHGDVSDUWRIDQHIIHFWLYHPRQLWRULQJUHJLPH *RRGPRQLWRULQJUHTXLUHVDJRRGXQGHUVWDQGLQJRIWKHH[SHFWHGVHUYLFHXVDJH:KHQ FRQVLGHULQJWKLUGSDUW\DQDO\VLVVHUYLFHVFRQVLGHUZKDWVXSSRUWWKHWKLUGSDUW\SURYLGHU ZRXOGQHHGWRGHOLYHUDQLQVLJKWIXOPRQLWRULQJVHUYLFH &RQVXPHUVVKRXOGFRQVLGHUZKHWKHUWKH\UHTXLUHDXGLWUHFRUGVWREHKHOGWRVSHFLILF VWDQGDUGVRUEHVXLWDEOHIRUVSHFLILFFLUFXPVWDQFHVHJVXFKDVEHLQJOHJDOO\DGPLVVLEOH LQD8.FRXUW

3ULQFLSOH6HFXUHXVHRIWKHVHUYLFHE\WKH FRQVXPHU 1RWH)RUGHWDLOHGLQIRUPDWLRQWKHPHDVXUHVWKDWFRQVXPHUVRIFORXGVHUYLFHVVKRXOG FRQVLGHUWDNLQJSOHDVHUHIHUWRWKH&RQVXPHU*XLGHV

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

(QGXVHUGHYLFHVXVHGWRDFFHVVWKHVHUYLFH $VZHOODVULVNVWRWKHFORXGVHUYLFHDQGFRQVXPHUDSSOLFDWLRQVDQGGDWDZLWKLQLW FRQVXPHUVVKRXOGFRQVLGHUWKHULVNVUHODWLQJWRWKHLUHQWHUSULVHQHWZRUNVDQGHQGXVHU GHYLFHVXVHGWRDFFHVVWKHVHUYLFH'HSHQGLQJRQKRZWKHFRQVXPHULVXVLQJWKHFORXG VHUYLFHLWPD\EHDFFHVVLEOHWRDUDQJHRIHQGXVHUSRSXODWLRQVDQGGHYLFHV )RUVRPHDSSOLFDWLRQVLWPD\EHDSSURSULDWHLQGHHGUHTXLUHG WRDOORZFLWL]HQRZQHG GHYLFHVWRFRQQHFWWRWKHVHUYLFHYLDDSXEOLFZHELQWHUIDFH+RZHYHUXVHUVIURPWKH FRQVXPHU¶VRUJDQLVDWLRQHJFDVHZRUNHUVLQDJRYHUQPHQWGHSDUWPHQWDFFHVVLQJFLWL]HQ GDWD PD\UHTXLUHWKHXVHRIHQWHUSULVHLVVXHGDQGPDQDJHGGHYLFHVZLWKDQDSSURSULDWH FRQILJXUDWLRQWRSURYLGHVXIILFLHQWVHFXULW\

,PSOHPHQWDWLRQREMHFWLYHV 7KHFRQVXPHUXQGHUVWDQGVDQ\VHUYLFHFRQILJXUDWLRQRSWLRQVDYDLODEOHWRWKHPDQGWKH VHFXULW\LPSOLFDWLRQVRIFKRLFHVWKH\PDNH 7KHFRQVXPHUXQGHUVWDQGVWKHVHFXULW\UHTXLUHPHQWVRQWKHLUSURFHVVHVXVHVDQG LQIUDVWUXFWXUHUHODWHGWRWKHXVHRIWKHVHUYLFH 7KHFRQVXPHUFDQHGXFDWHWKRVHDGPLQLVWUDWLQJDQGXVLQJWKHVHUYLFHLQKRZWRXVHLW VDIHO\DQGVHFXUHO\


'HVFULSWLRQ

*XLGDQFH

&RUSRUDWHHQWHUSULVH GHYLFHV

7KHVHUYLFHLVDFFHVVHGIURPGHYLFHVXQGHUWKH GLUHFWFRQWURORIWKHFRQVXPLQJRUJDQLVDWLRQ

$VLQJOHFRPSURPLVHGGHYLFH ZRXOGKDYHDFFHVVWRDQ\GDWD IXQFWLRQDOLW\RUFUHGHQWLDOV DFFHVVLEOHWRDXWKRULVHGXVHUVRI WKDWGHYLFH 7KH(QG8VHU'HYLFH6HFXULW\ *XLGDQFHSURYLGHVULVN PDQDJHPHQWDQGFRQILJXUDWLRQ JXLGDQFHIRUDUDQJHRISODWIRUPV IRUSURFHVVLQJ2)),&,$/GDWD

3DUWQHUGHYLFHV

7KHVHUYLFHLVDFFHVVLEOHIURPGHYLFHVRYHUZKLFK WKHFRQVXPLQJRUJDQLVDWLRQKDVVRPH XQGHUVWDQGLQJDQGRUFRQWURORYHU)RUH[DPSOHYLD FRQWUDFWXDOFODXVHVRUYLDFRQIRUPDQFHZLWKDQ DJUHHGVHFXULW\UHTXLUHPHQWV

$VLQJOHFRPSURPLVHGGHYLFH ZRXOGKDYHDFFHVVWRDQ\GDWD IXQFWLRQDOLW\RUFUHGHQWLDOV DFFHVVLEOHWRDXWKRULVHGXVHUVRI WKDWGHYLFH 7KHFRPSOLDQFHPHFKDQLVPLV EHLQJUHOLHGXSRQWRWUDQVLW VHFXULW\UHTXLUHPHQWV,ILWLVQRW ZHOOGHVLJQHGLWZLOOEHLQHIIHFWLYH

8QNQRZQGHYLFHV

7KHVHUYLFHSURYLGHUDVVHUWVWKDWWKH\FRQWURO DFFHVVWRPHGLDDQGVWRUDJHGHYLFHVKROGLQJ FRQVXPHUGDWD

,WLVLPSRVVLEOHIRUFRQVXPHUVWR EHDEOHWRLGHQWLI\FRPSURPLVHG GHYLFHVVRWKHVHUYLFHVKRXOGEH GHVLJQHGWRDVVXPHWKHGHYLFHV DUHKRVWLOH &LWL]HQVFDQEHGLUHFWHGWR ZZZJHWVDIHRQOLQHRUJIRU SUDFWLFDODGYLFHRQVHFXULQJWKHLU GHYLFHV

/HJDOLQIRUPDWLRQ 7KLVJXLGDQFHLVLVVXHGE\&(6*WKH8. V1DWLRQDO7HFKQLFDO$XWKRULW\RQ,QIRUPDWLRQ $VVXUDQFH2QHRIWKHUROHVRI&(6*LVWRSURYLGHDGYLFHWR8.JRYHUQPHQWHQWLWLHVDQG RUJDQLVDWLRQVSURYLGLQJVHUYLFHVWR8.JRYHUQPHQW7KHJXLGDQFHIRXQGKHUHLVSURYLGHG

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

IMPLEMENTING THE CLOUD SECURITY PRINCIPLES

Recommend Documents