How should communication over public networks be protected?

1.1.The Supplier shall ensure that when public networks (Internet) are utilized by the Supplier, appropriate security mechanisms are in place so that no unauthorized access is possible.

1.2.The Supplier shall ensure that when Confidential Information or COMPANY NAME Data is communicated over a public network it shall be encrypted either with SSL/TLS with encryption keys of AES-128 bits strength or equivalent for symmetric encryption and RSA-2048 bits strength or equivalent for asymmetric encryption, or by another solution that has been approved in writing by COMPANY NAME beforehand.