## 4 Results
### Stage 1: Diagnosis of Compliance with the ISO 10008 Standard in the Computer Microenterprise
#### 4.1.3. Compliance with the ISO 10008 Guidelines on Two E-Commerce Platforms  
Developed by the Computer Microenterprise  
The final results of the compliance with the international standard ISO 10008 regarding the two selected companies are analyzed in this section. The summary information of the analysis of the responses of the semi-structured interviews was information captured in the gap analysis matrix, with predetermined and unstructured questions to the owners of the companies \"Comp 1\" and \"Comp 2\". In these interviews, what was mainly sought was to know the level of compliance with the standard and its guidelines. The gaps analysis identified the general metrics for compliance with the ISO 10008 standard's guidelines for Comp 1 was 64%, while Comp 2 obtained 63%, both similar results. For this, recommended techniques from the book \"The integrated use of Management System Standards\" [37] were used. We applied the gaps matrix to obtain the compliance analysis based on chapters 4 to 8 of the ISO 10008 standard for Comp 1 and Comp 2; Table 1 shows an extract for better understanding. Table 3 shows details of the level of implementation described above in the two companies, by chapter of the ISO 10008 standard. In general terms, in both companies there was high compliance in chapters 4, guiding principles, and 6, single-phase processes. While chapter 8, maintenance and improvement, had the lowest compliance. For a better understanding of the grade of compliance with the ISO 10008 standard of the e-commerce platforms analyzed, examples of some of the controls that are met and others where improvement is needed are presented. In the case of Comp 2, the guideline \"4.10 consent\" was fulfilled. Since the terms and conditions are shown clearly at the moment of a consumer's registration on the e-commerce platform, consumers can accept these terms informedly. Another guideline complied with is \"4.11 fairness\", because the platform was developed with adequately sized letters and with a simple interface so that adults can understand and use it easily and fairly. Comp 2 met the \"4.15 security\" guideline, since a secure sockets layer (SSL), an encryption-based internet security protocol, is used for browsers and servers, that allows the authentication, encryption, and decryption of data sent over the internet. In other words, credit cards are encrypted when making purchases on the e-commerce platform. In Comp 1, this is also covered, and in addition to this, system files are protected in terms of information security from phishing (disabling file permissions) and password breaches. In chapter 5 \"business-to-consumer electronic commerce transaction system\" of ISO 10008, Comp 1 presented a compliance of 44%, while Comp 2 obtained 46%. For instance, in relation to the \"5.2 objectives\" guideline, in both of the analyzed e-commerce platforms, the objectives and their compliance with performance indicators were not determined. \begin{table}
\begin{tabular}{l c c} \hline \hline  & **Comp 1** & **Comp 2** \\ \hline
4. Guiding Principle & 74\% & 78\% \\
5. BTC ECT Systems & 44\% & 46\% \\
6. Single-Phase Processes & 82\% & 78\% \\
7. Multiphase Processes & 55\% & 48\% \\
8. Maintenance and Improvement & 20\% & 20\% \\ \hline \hline \end{tabular}
\end{table} 
Table 3: ISO 10008 implementation level. In chapter 6, \"single-phase processes\", specifically in \"6.2.5 payment selection support\", the companies had low scores, since in Comp 1 there were only two payment methods (bank transfer and Webpay Plus) and in Comp 2 there was one payment method (Webpay Plus), while the standard recommends providing the consumer with as many payment methods as possible. Regarding \"6.1.2 content creation\", which poses that e-commerce platforms should show information about their products [25], in both of the reviewed platforms complete descriptions of the products were not included.