OCCIDENTAL OIL & GAS CORPORATION & ITS AFFILIATES (COLLECTIVELY, OXY) Version 1.0 Supplier B2B Integration Readiness and Technical Assessment Questionnaire 1 April 30th, 2014 PURPOSE The purpose of this document is designed to capture critical information necessary to assess that Oxy and its suppliers can exchange electronic business data using mutually agreed upon PIDX and RosettaNet file formats and protocols. Essentially, the Supplier B2B Integration Readiness and Technical Assessment guide demonstrates the following: 2 An indication of what effort and resources will be required to ensure successful enablement Essential contact names and contact details within the supplier organization to ensure effective and regular communication is maintained between parties Connectivity requirements between Oxy and its Suppliers (from/to supplier middleware server to/from Oxy B2B server) via HTTPs and Client authentication Successful protocol/ process handling Successful exception and error handling Digital certificate signatures B2B INTEGRATION SUPPLIER INSTRUCTIONS The supplier should complete this questionnaire and submit completed forms by e-mail to OneOxy_B2BSupport@Oxy.com. 3 B2B INTEGRATION – SUPPLIER KEY CONTACT INFORMATION Please fill in the contact information for the following individuals: Feature Name Project Manager B2B Technical Lead B2B Support Lead Business Lead Name Job Title Address Phone Number Mobile Phone Email Address Corporate Information: B2B Infrastructure Location Corporate Mailing Address Web Site Main Phone Number Dun & Bradstreet Number (DUNS) Intellectual property restrictions. Oxy proprietary information. Page 1 of 5 OCCIDENTAL OIL & GAS CORPORATION & ITS AFFILIATES (COLLECTIVELY, OXY) Version 1.0 Supplier B2B Integration Readiness and Technical Assessment Questionnaire 4 April 30th, 2014 B2B INTEGRATION SUPPLIER GENERAL BUSINESS QUESTIONS 1. What is your level of interest in becoming an Oxy B2B Integrated Supplier? 2. What level of impact will becoming an Oxy B2B Integrated Supplier have on your organization? 3. Does your company have a B2B initiative today? 4. Does your company have resources to become an Oxy B2B Integrated Supplier? 5. If NO, when will the company be ready to become an Oxy B2B Integrated Supplier? 6. How is data being exchanged today with Oxy or your other trading partners? 7. Which of the following document types are you currently exchanging with your trading partners? Intellectual property restrictions. Oxy proprietary information. Page 2 of 5 OCCIDENTAL OIL & GAS CORPORATION & ITS AFFILIATES (COLLECTIVELY, OXY) Version 1.0 Supplier B2B Integration Readiness and Technical Assessment Questionnaire 8. April 30th, 2014 What is the frequency in which you exchange electronic (B2B) data? Per 5 9. B2B INTEGRATION SUPPLIER TECHNICAL QUESTIONS Does your organization’s B2B implementation transmit documents from internally managed systems or through a 3rd party service provider? If 3rd party service provider, please identify your vendor: Vendor Name: Vendor Phone: Technical Lead Name: Technical Lead Phone: Technical Lead email: 10. What middleware/B2B software is used to support your B2B messages? Software Version webMethods Intellectual property restrictions. Oxy proprietary information. Latest Service Pack Page 3 of 5 OCCIDENTAL OIL & GAS CORPORATION & ITS AFFILIATES (COLLECTIVELY, OXY) Version 1.0 Supplier B2B Integration Readiness and Technical Assessment Questionnaire April 30th, 2014 Biztalk Tibco Custom Application Other (Please specify below) 11. Does your middleware/B2B software or service provider have capabilities of exchanging data via the following message formats? 12. Does your middleware/B2B software or your service provider support transaction tracking to ensure reliable delivery of data (handshake ACK/NACK)? 13. Does your middleware/B2B software or your service provider support automated retries? 14. What type of transport protocol does your middleware/B2B software or service provider support? 15. What ERP/business system environments do you support? (Please check all that are applicable) Development Production Test/Production Support Disaster Recovery (DR) 16. Which of these ERP/business system environments are equipped to exchange test/production data? (Please check all that are applicable) Development Production Test/Production Support Disaster Recovery (DR) 17. Do you have firewalls as part of your IT security? 18. Does your company have Disaster Recovery (DR) and Business Continuity Plans? 19. Does your company keep your ERP/business system Test/Development environments code current with your Production environment? 20. How frequently do you refresh your ERP/business system Test/Development environments from Production? Intellectual property restrictions. Oxy proprietary information. Page 4 of 5 OCCIDENTAL OIL & GAS CORPORATION & ITS AFFILIATES (COLLECTIVELY, OXY) Version 1.0 Supplier B2B Integration Readiness and Technical Assessment Questionnaire April 30th, 2014 21. B2B Supply Chain communities have multiple options for security. Please indicate the type of certificates you will require for SSL connectivity (Oxy requires 3 level certificate): Test Environment Certificate Type HTTP/HTTPS/SSL Certificate Authority (CA) Attach the certificate Certificate Authority (CA) Attach the certificate Certificate Authority (CA) Attach the certificate Digital Signing / Validation Encryption/ Decryption Other (Please explain) Production Environment Certificate Type HTTP/HTTPS/SSL Digital Signing / Validation Encryption/ Decryption Other (Please Explain) Disaster Recovery (DR) Environment Certificate Type HTTP/HTTPS/SSL Digital Signing / Validation Encryption/ Decryption Other (Please Explain) 22. Are you currently exchanging PIDX XML data with your trading partners? If Yes, who may we contact to get sample PIDX XML invoices? Intellectual property restrictions. Oxy proprietary information. Page 5 of 5