2 Responsibilities

As retailers migrate to the cloud, they must consider how the cloud, and more specifically SaaS, will impact their privacy, security, and compliance efforts. As the cloud service provider, Oracle Retail works together with customers to meet cloud security objectives.

Retailer/Portal Owner Responsibilities

At a high level, retailers/portal owners are responsible for:

• Understanding Oracle's security policies.

• Implementing their own corporate policies by using Oracle tools.

• Creating and administering users by using Oracle tools.

• Ensuring data quality and enforcing end-user devices security controls, so that anti-virus, malware and other malicious code checks are performed on data and files before uploading data.

• Ensuring that end-user devices meet the minimum security requirements.

To securely implement Supplier Evaluation Cloud Service, retailers/portal owners and their implementation partners should read this document to understand Oracle's security policies. This document summarizes information and contains links to many other Oracle documents.

Oracle Responsibilities

As the cloud service provider, at the highest level Oracle Retail is responsible for:

• Building secure software.

• Provisioning and managing secure environments.

• Protecting the customer’s data.

Supplier Evaluation Cloud Service fulfills its responsibilities by a combination of corporate level development practices and cloud delivery policies. Sections in this document will describe this information in great detail later in this document.