An Important Letter to Members about Changes to your ACCESS Online Security
March, 2007
Dear Member,
Starting soon, your online account will be protected with a higher level of security. The Access Online security enhancements will better protect you against online theft and fraud, provide you with more peace of mind when banking online, and will help minimize the risk of falling victim to a “spoofed” web site.
How It Will Work
You will complete a simple, one-time enrollment process the first time you log into the enhanced system.
1. You’ll select a picture from an online library of images; the image will be displayed to you on future Access Online logins. The image is known only to you and the credit union.
2. You’ll enter a word or phrase that will be displayed along with your image when you login. The text phrase is known only to you and the credit union.
3. You’ll select three “Challenge Questions” and provide the answers to the questions.
Logging into Access Online
After enrollment, when you log into Access Online you’ll enter your User ID. Then, we’ll show you the picture and text phrase you selected. If the image and phrase shown to you are correct, you’ll continue with the login and enter your password. This is your assurance that you are logging into the legitimate CES home banking web site, since no one else knows your image and text phrase – only you and us.
Challenge Questions
Challenge questions will only be displayed if you log into Access Online from a different computer than you used when you enrolled. If we don’t recognize the computer, we will double check that it is really you. This is another layer of security designed to protect your account from unauthorized access if your account information is stolen, and help us identify you when you are logging into Access Online from an unknown computer. You’ll have the opportunity to “register” computers you regularly use to access your online account. Once you successfully answer the question, we’ll show you your picture and phrase.
This enhanced security will not require you to have any additional hardware or software for your computer. All of the identification and validation takes place behind the scenes – creating a silent but secure login.
The protection of your financial information and the security of your online transactions are very important to us. We will continue to update you as we get closer to implementation.
Thank you!
Although this log-in is very easy and quick, we'll run through an example: Within the next few weeks, when you log in to ACCESS Online, you will be asked a few "challenge" questions (like, "What is your favorite team mascot?") and you'll be asked to pick an image (say, a dog) and to enter a text phrase (say "Fido"). Then you'll be directed onto the online banking site.
If you do this from home, then from that point on, you'll see the image of the dog and the phrase "Fido" when you log in, so you'll know you are at the right website with a secure connection.
If later, you log in at work on a different PC, you'll be asked a challenge question again, and you can enter the answer you gave to your question before, like your favorite mascot. The security identifies you as the accountholder and allows you to enter, again showing your image and text (our dog named "Fido"). You only need to do this one time for every different PC you use for online banking.
This is not a measure in response to any security problem. Rather it is a proven security method to authenticate the user and deter potential fraud attempts.)
CES Credit Union, Inc. Privacy Policy
CES Credit Union, Inc. is owned by you, our members and run by a board of directors you elect.
You can be confident that your financial privacy is a top concern of this credit union. We are required by law to give you this privacy policy to explain how we collect, use and safeguard your personal financial information. If you have any questions, please contact us at (740) 397-1136 or toll-free at (888) 397-1136.
CES Credit Union collects nonpublic personal information about you from the following sources:
- Information we receive from you on membership and loan applications and other forms; and
- Information about your transactions with us or others; and
- Information we receive from a consumer reporting agency.
We are committed to providing you with competitive products and services designed to meet your financial needs, which necessitates that we share information about you to complete your transactions and to provide you with certain financial opportunities. In order to do so, we have entered into agreements with other companies that provide either services to us or additional financial products for you to consider. Each of these companies have been approved by the credit union's board of directors, and are not permitted to sell the information we provide to them to any third parties. CES Credit Union does not sell member information.
We may disclose all of the information we collect as described above to other financial service providers with whom we have joint marketing agreements.
We may also disclose information we collect about you under other circumstances as permitted or required by law. These disclosures typically include information to process transactions on your behalf, conduct the operations of our credit union, follow your instructions, or protect the security of our financial records.
If you terminate your membership with CES Credit Union, Inc., we will not share information we have collected about you, except as permitted by law.
CES Credit Union, Inc. restricts access to nonpublic personal information about you to those employees who have a specific business purpose for using it. Our employees are trained on the importance of maintaining confidentiality and member privacy. We maintain electronic and physical safeguards that comply with federal regulations and leading industry practices to safeguard your nonpublic personal information.
CES Credit Union, Inc. Internet Privacy Policy
CES Credit Union, Inc. uses site security software programs to monitor network traffic and detect any unauthorized efforts to upload or change information or to cause damage.
CES Credit Union collects site management information for statistical purposes only to create summary statistics. These summary statistics are used for the purpose of assessing what information is more interesting or less interesting, determining best design and technical specifications, monitoring system performance and detecting any problem areas. In addition, we do not monitor your Internet activity. No information which would identify you personally is collected or used for any of these purposes.
If you send us any information voluntarily from one of our web forms, we will collect and use the information to respond or act on your request, and may store these requests to provide us with information for possible future improvements to our web site. CES Credit Union never sells member information or creates individual profiles with the information you provide.
Adopted, CES Credit Union Inc. Board of Directors, Dec. 20, 2000
