Security Policy

The protection of consumers' personal and financial information is critical to Baltimore Gas and Electric's success. Thus, in conjunction with our business partners we provide you with a high degree of security by utilizing the latest industry security techniques and methodologies. In order to ensure that the appropriate controls, procedures, and mechanisms are in place our EBPP application has integrated the services and products of CheckPoint and Internet Security Systems (ISS).

Application Level
Our EBPP application employs the following controls and measures:

  • Uses Secure Socket Layer (SSL) 128 bit encryption for all transmissions of customer data in order to assure privacy.
  • Automatically logs out a customer after a certain period of time in order to protect personal information from onlookers.
  • User ID and password can be changed by the customer at first sign on and subsequently. This further protects the end user from tampering by others.

In the event the customer forgets the password, BGE customer service personnel do not have access to the password. Such personnel, after confirming the identity of the caller, have the ability only to reset the password, so the customer may select a new password.

Network and Facility Level
Our EBPP application-processing servers are located within state-of-the-art facilities where we and third parties conduct regular reviews of our methodologies in order to satisfy SAS 70 and banking requirements. The hardware, networking and facility security measures are described below:

  • Redundant firewalls configured to deny everything unless it is expressly permitted.
  • The data center utilizes intrusion detection and scanning software from ISS. This software identifies network and system attacks and responds through session termination and firewall reconfiguration.
  • 3 level card key access to gain entrance to systems including a card and palm scan.
  • Around the clock physical monitoring of systems and security incident response team available 24 hours a day.
  • Personnel background checks for key positions.
Information from www.bge.com:
null