CIB>>CIB Online Security

CIB Online Security

How we protect your money online
How you can protect your money online
 
How we protect your money online
We take every step to protect your money online and we intend to keep it that way. Technology is changing all the time and our team of experts keeps up to date with developments in online security so that Online Banking remains safe and secure.
Here's what we do to Ensure that your online transactions are safe and secure: In CIB we use industry standard security technology and practices, focusing on three key areas to safeguard your account from any unauthorized access.
  • Privacy
  • Technology
  • Identification Privacy

Privacy

We use industry standard encryption within our internet banking services
Secure Sessions
When you log in to Personnel Banking you are said to be in a secure session . You know you are in a secure session if the URL address begins with https:// or a padlock symbol appears in the lower right hand corner of your browser.
Encryption
SSL technology is used within your Personnel Banking session to encrypt your personal information before it leaves your computer, to ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page.
Encryption converts your data into an encoded form before it's sent over the Internet, stopping unauthorized users from reading the information. At CIB, we use 128-bit Secure Socket Layer (SSL) Encryption , which is accepted as the industry standard level.
Any Email service within Personnel Banking is similarly protected with encryption technology (unlike your regular email which is not usually secure).
Session Time-out
If you forget to log-off after banking online, or your computer remains inactive for a period of time during a session, then our systems automatically log you off. Pages viewed during a secure session are not recorded in your PC's temporary files.
 
Technology
We use many layers of security - for obvious reasons we cannot disclose all of them, but the following are typically used:
 
  • All our operating systems are updated with the latest security patches
  • Our anti-virus software is kept updated
  • We use firewalls to prevent unauthorized intrusion
  • Personnel Accounts' entire production network is monitored and policed for intrusion attempts 24x7.
  • Personnel Accounts' application network uses private IP addressing, which protects servers that do not require access to the Internet.
  • Personnel Accounts security infrastructure is regularly audited and inspected by industry-leading firms that specialize in security processes and technologies.

Identity Privacy
We use log-ins and passwords to make sure we're dealing with you
Online access to your account is only possible once you have authenticated yourself using the correct Personnel banking ID and password. For this reason it is vital that you do not share your password and do not use the same password for any other services (e.g. Yahoo, Hotmail)
Automatic Lock-out
After a number of incorrect attempts to log in, we disable online access to your account. To re-activate your account, you should contact your usual helpdesk number.
 
How you can help to protect your money online
There is much that you can do to protect yourself online. Some are simple, others may require a little time invested or help from someone else.
Please follow these steps:
 
  • Keep you details and identity secure
  • Keep your password secure
  • Ensure your operating system (e.g. Windows XP) and your internet browser have the latest security updates and 'patches'
  • Use and regularly update anti-virus software
  • Use a 'personal firewall'
Keep your details and identity secure
  • If you can, try to avoid using Internet Banking, or any critical passwords, at Internet Cafés, Libraries, and other public sites to avoid the risk of information being copied and re-entered after you leave.
  • Be aware that there are phoney web sites designed to trick you and collect your personal information. Sometimes links to such web sites are contained in emails purporting to come from financial institutions. Try whenever possible to use a known web address, or use a Favorite, to link to bank pages.
  • Always change passwords that may have been compromised.
  • Use a password on your computer to prevent unauthorized individuals from accessing your information. If you are unsure how to do this, you may need to ask someone.
  • Buy from well known companies - and only provide bank information in secure sessions.
  • Disable the 'AutoComplete' function within your browser, this will help prevent others from seeing personal information. On Internet Explorer for example, the 'AutoComplete' function remembers data you have input, sometimes including passwords. Typically the browser's own Help function will tell you how to do this.
Keep your password secure
Passwords are the key to your online account information so it's important to keep them safe. Passwords are the key to your online account information. Avoid using the same password for different systems that are important to you. Doing so puts your money at risk should anyone discover this single password. For this reason, you are strongly advised to have a unique password for any services as critical as your internet banking. When choosing a suitable password, you might consider the following:
 
  • Never write them down.
  • Do not be tempted to share your passwords with anyone.
  • Try and create passwords that are unique and that cannot be easily guessed by someone else.
  • Passwords containing mixed letters and numbers are far harder to guess. e.g. m1ss1ss1pp1
  • Avoid using the same password for different services.
  • Do not be tempted to use passwords that can easily be guessed e.g. your name, your birth dates, telephone numbers, pet's name.
  • We strongly recommend that you never write down or otherwise record your passwords. If, however, you feel that you have no alternative but to do so, you should ensure that you never write down or otherwise record your passwords in a way that can be understood by somebody else
  • Contact your bank if you think someone else knows your Personnel banking password

No one at CIB will ever ask you for your Personnel banking password. If someone does ask you for it - they do not represent CIB.
 
 
Update & Patches
From time to time vulnerabilities are discovered in these programs. The publisher will then release a 'patch' to correct this weakness. These weaknesses are regularly exploited by virus writers and hackers to gain unauthorized access to those PC's that have not been patched. To check for patches and updates you should visit the publisher's website, typically in their Download section.
Microsoft users can visit: http://windowsupdate.microsoft.com which can automatically check what is required for both operating system and browser and then download it at your request.
 
Anti-virus software
You may already be using anti-virus software but to be effective the software should be updated on a regular basis with the latest virus definition files. If you are unsure how to do this, you should refer to the program's Help function.
There are many effective programs to choose from, but the most common commercial products include McAfee , Symantec (Norton) and Sophos.
It is also possible to obtain free anti-virus protection. A search for 'free anti-virus' on Google will provide a list of the most popular.
 
Personal firewalls
A firewall is a small program that helps protect your computer from the internet. A firewall is another small program that helps protect your computer and its contents from outsiders on the internet. When installed it stops unauthorized traffic to and from your PC. There are many effective programs to choose from. Common commercial examples include Zone Labs , McAfee and Computer Associates .
 
The widely recognized market leading free firewall is 'Zone Alarm' from Zone Labs and there are many others to choose from. Zone Alarm is now used on over 20,000,000 PC's and has been awarded the PC World 2003 'World Class Award' for Best Firewall.