The status of an electronic record or an electronic signature as secure may be challenged by evidence:

1. (1) indicating that the security procedure agreed to between the parties is not commercially reasonable or was not implemented in a trustworthy manner; or

2. (2) that a security procedure not agreed to by the parties was not trustworthy because it was not:

   1. (a) unique to the party using it;
   2. (b) capable of identifying such party;
   3. (c) created in a manner or using a means under the sole control of the party using it; or
   4. (d) linked to the electronic record to which it related in a manner such that, if the record was changed, the electronic signature would be invalidated.