Home / Fraud Protection Center / Commercial Banking Online Security

Commercial Banking Online Security

Our Part

• We use firewall systems and intrusion detection software to protect against unauthorized access to our systems.
• We protect the confidentiality of your data by encrypting sensitive information with 128-bit Secure Socket Layer (SSL). This is designed to ensure that sensitive information can only be viewed by you and First State Bank.
• We build information security right into our systems and networks using internationally recognized security standards, regulations, and industry-based best practices.
• We employ layered security controls including strong authentication methods following guidance provided to us by the Federal Government's banking regulators.
• We require our employees to take information security awareness training and to apply this training to their job every day.

Your Part

While it is your responsibility to safeguard your own data, including information that can be used to access or transact against your accounts at First State Bank, we recommend that you consider implementing the following data security related rules or controls for your business:

Protect Online Payments & Account Data

• Evaluate your internal controls for online banking and conduct an annual risk assessment. Identify gaps and continuous improvement opportunities to ensure the safety of your financial data and resources.
• Dedicate and restrict one computer to online banking transactions; allow no Internet browsing or e-mail exchange and ensure this computer is equipped with latest versions and patches of both anti-virus and anti-spyware software.
• Segregate responsibilities among different employees by maintenance, entry and approval.
• Delete online user IDs as part of the exit procedure when employees leave your company.
• Assign dual system administrators for online cash management services. 
• Periodically evaluate employee job functions and remove online services. 
• Establish transaction limits for employees who initiate and approve online payments.  
• Set up alerts to notify manager of payments initiated above a threshold amount that warrant management’s attention.  
• Use dual controls; require multiple users to release an online payment because it is less likely a fraudster would control the workstation of both initiating employees.  
• Reconcile by carefully monitoring account activity and reviewing all transactions initiated by your company on a daily basis. 
• Use separate accounts for electronic and paper transactions to simplify monitoring and tracking any discrepancies.

Best Practices for Online Banking Security

Use strong, complete passwords that contain:

• Alpha/numeric characters and symbols  
• Upper and lower case characters  
• Minimum of 8 characters but longer is recommended  
• No real words or names of family/friends/pets  
• Use entire keyboard; avoid strings of identical characters  
• Change your passwords regularly and use a different password for each website you access.  
• Never reveal your confidential login ID, password, PIN or answers to security questions to anyone.    
• Never bank online using computers at kiosks, cafes, unsecured computers, or unsecured wireless networks.  
• Prohibit the use of shared user names and passwords for your online banking accounts.

Tips to Avoid Phishing, Spyware and Malware

• Don’t open e-mail from unknown sources.  
• Never respond to suspicious e-mail or click on any hyperlink embedded in a suspicious e-mail.  
• Call the purported source if you are unsure who sent an email.
• If an e-mail claims to be from your bank, call an Electronic Banking representative.  
• Educate your staff about current scams and loss-prevention steps.  
• Make sure all of the computers your staff members use for work-related business – at the office and at home – have the latest versions and patches of both anti-virus and anti-spyware software.  
• Maintain updated and patched systems and software.  
• Install a firewall between your computers and the Internet  
• Restrict administrative rights to install programs to IT staff.  
• Check your settings and select at least a medium level of security for your browsers.  
• Clear the browser cache before starting an online banking session to eliminate copies of Web pages that have been stored on the hard drive.

There is no substitute for the advice of experts with intimate knowledge of your operations. We at First State Bank recommend that you obtain data security and anti-fraud advice from such experts.