The Online Trust Alliance provides independent research, benchmark reporting, and best practices related to Internet security and privacy to deliver uniquely comprehensive insight and practical recommendations for organizations of all sizes. Flagship reports include the Online Trust Audit & Honor Roll, Cyber Incident & Breach Trends Report, and Email Marketing & Unsubscribe Audit.
All OTA Resources
2018 Online Trust Audit and Honor Roll
Building Trust
16 April 2019
2018 Online Trust Audit and Honor Roll
The Online Trust Audit & Honor Roll assesses nearly 1,200 organizations, recognizing excellence in online consumer protection, data security, and responsible privacy...
Best Practices: Infrastructure Security
Improving Technical Security
16 April 2019
Best Practices: Infrastructure Security
Optimize TLS implementation using information gleaned from public tools. This includes eliminating use of insecure ciphers and older, insecure...
Best Practices: Privacy
Privacy
16 April 2019
Best Practices: Privacy
Basic Notice/Disclosure Make sure the privacy statement has a link and is easily discoverable from the home page. Place...
2018 Email Marketing & Unsubscribe Audit
Building Trust
28 November 2018
2018 Email Marketing & Unsubscribe Audit
The 2018 Email Marketing & Unsubscribe Audit found that the vast majority of audited online retailers have embraced unsubscribe...
Best Practices: Email Unsubscribe
Building Trust
28 November 2018
Best Practices: Email Unsubscribe
Email is a vibrant channel for marketers to connect with consumers on many fronts, providing an important value exchange...
Best Practices: Enterprise IoT Security Checklist
Internet of Things (IoT)
17 April 2018
Best Practices: Enterprise IoT Security Checklist
The Internet of Things (IoT) has found its way into all aspects of our lives. In particular, consumer IoT...
2018 Cyber Incident & Breach Trends Report
Building Trust
25 January 2018
2018 Cyber Incident & Breach Trends Report
This year marks the Online Trust Alliance’s tenth annual publication related to cyber incidents and breach readiness. Now an...
Best Practices: Cyber Incident Response Readiness
Security
25 January 2018
Best Practices: Cyber Incident Response Readiness
Complete risk assessments for executive review, operational process and third-party vendors Review security best practices and validate your organization’s...
2017 Email Marketing & Unsubscribe Audit
Building Trust
6 December 2017
2017 Email Marketing & Unsubscribe Audit
The 2017 Audit found that the vast majority of audited online retailers have embraced unsubscribe best practices, going beyond...
Email Practices & Reports
Building Trust
2 October 2017
Email Practices & Reports
Identifying best practices to help bolster the integrity of the email marketing channel is one of OTA’s key initiatives....
Best Practices: Botnets
Building Trust
2 October 2017
Best Practices: Botnets
About Botnets A “bot” or “botnet” is a program installed on a system to enable that system to automatically...
Elliptic Curve Cryptography (ECC)
Building Trust
2 October 2017
Elliptic Curve Cryptography (ECC)
Since 1976, public key cryptography has become the foundation on which secure communications were established over the Internet. The...