ETD-022 – Cybersecurity Policy
Plain Language Summary
EmergencyTireDelivery.com (“ETD”) recognizes that cybersecurity is essential to maintaining a trusted online marketplace.
ETD is committed to protecting marketplace systems, information, and services through reasonable administrative, technical, and organizational safeguards that support the confidentiality, integrity, and availability of marketplace operations.
Cybersecurity is an ongoing process that requires continuous improvement, responsible technology management, and shared awareness among everyone who participates in the ETD Marketplace.
1. Purpose
The purpose of this Policy is to establish ETD’s commitment to maintaining a secure online marketplace through responsible cybersecurity practices and continuous risk management.
Effective cybersecurity helps protect customers, providers, marketplace operations, and business information while supporting confidence in the ETD Marketplace.
2. Scope
This Policy applies to the technology, systems, networks, software, services, and information that support the ETD Marketplace, including but not limited to:
- Marketplace websites
- Provider accounts
- Customer accounts
- Administrative systems
- Databases
- Cloud services
- Communication systems
- Mobile access
- Connected technologies
3. Cybersecurity Principles
ETD seeks to maintain cybersecurity practices that are:
- Proactive
- Risk-based
- Continuously improving
- Appropriate for marketplace operations
- Consistent with applicable legal requirements
- Supportive of customer and provider confidence
4. Security Objectives
ETD seeks to:
- Protect marketplace information.
- Reduce cybersecurity risks.
- Support reliable marketplace operations.
- Prevent unauthorized access where reasonably possible.
- Detect and respond to security events.
- Continuously strengthen cybersecurity practices.
5. Security Measures
ETD may implement appropriate security measures, including practices such as:
- Identity and access controls
- Encryption where appropriate
- Software updates and maintenance
- Network security controls
- System monitoring
- Backup procedures
- Vulnerability management
- Multi-factor authentication where practical
- Security logging
- Administrative safeguards
Specific technologies and security controls may change as cybersecurity practices evolve.
6. Shared Responsibility
Cybersecurity is a shared responsibility.
Customers and providers are encouraged to:
- Protect account credentials.
- Use strong passwords.
- Enable additional security features when available.
- Keep their own devices secure.
- Report suspected security concerns promptly.
- Exercise caution when responding to unexpected communications requesting sensitive information.
7. Third-Party Services
ETD may utilize trusted third-party technology providers to support marketplace operations.
When practical, ETD seeks to work with service providers that maintain appropriate security practices consistent with the services they provide.
8. Incident Response
If ETD becomes aware of a cybersecurity incident affecting marketplace operations, ETD may investigate the matter and take reasonable actions to:
- Protect marketplace systems.
- Limit potential impact.
- Restore affected services.
- Improve future security measures.
- Comply with applicable legal obligations.
9. Continuous Improvement
Cybersecurity threats continue to evolve.
ETD periodically reviews and improves its cybersecurity practices based upon:
- Technology advancements
- Industry standards
- Operational experience
- Risk assessments
- Marketplace growth
- Lessons learned from security events
10. Privacy
Cybersecurity supports, but does not replace, ETD’s commitment to protecting personal information.
The collection, use, retention, and disclosure of personal information remain governed by ETD’s Privacy Policy and applicable law.
11. No Absolute Security
While ETD is committed to maintaining appropriate cybersecurity practices, no online system can guarantee absolute protection against every possible threat.
ETD continually works to reduce risk, strengthen security, and improve the resilience of the marketplace through responsible technology management and ongoing improvement.
Related Documents
This Policy should be read together with:
- ETD-003 – Privacy Policy
- ETD-007 – Provider Participation Agreement
- ETD-015 – Marketplace Quality Assurance Policy
- ETD-018 – Artificial Intelligence & Automated Systems Policy
- ETD-020 – Records Retention & Information Management Policy
- ETD-021 – Business Continuity & Disaster Recovery Policy
Guiding Principle
Cybersecurity is fundamental to maintaining trust in the ETD Marketplace. Through responsible technology management, continuous improvement, and shared awareness, ETD seeks to protect its marketplace, support reliable operations, and safeguard the information entrusted to it.