Web Business Banking Security Measures

Description

There are many ways that Web Business Banking helps you securely manage the system and protect your company’s data. Web Business Banking provides you with the ability to do the following:

Limit Access to the system as well as specific functions:

An authorized user with the appropriate rights sets up and maintains users for your company
Security rights are assigned to users in order to restrict access to service functions and data
A unique Connect ID and password is required to allow you to connect to TD Bank

Limit Authority:

Web Business Banking offers the security feature - Approval Required for Administrative Changes. This feature limits the authority of any one individual in your company. When selected, any change to administrative functions performed for your company requires an authorized user to approve the change.

Secure your Data:

Web Business Banking works with both Netscape® and Microsoft®1 Internet Explorer browsers that support 128-bit encryption. Encryption is a way of scrambling your information so that unauthorized individuals cannot decipher it. To unscramble the information, one needs a key. For your protection, only TD has the key.
After a period of inactivity, your session will expire and you will need to login again. This helps to prevent unauthorized access if you leave your PC temporarily.
Some services on your Web Business Banking system may require or provide the option of the use of an Authentication Device to further protect your transactions.

Select different levels of Security:

Within the security system provided, your company can elect to use one of the following approval processes for a particular service.
Note: Not all approval processes are available for each service.

No Authorization- Transactions are sent to TD Bank by the creator of the transaction. No further approval is required.

Authorization- A System Administrator assigns certain users the right to authorize transactions. Other users can create the transaction, but only users with the Authorize right can approve the transaction to be sent to the Bank for processing.

Authorization with Authentication- If your company has chosen this level of security, a System Administrator assigns a Connect ID along with the applicable Authentication Device to each user responsible for authorizing payments. In order to send transactions to TD, these users must use the assigned Authentication Device to approve each transaction.

Company Measures

Your company also has responsibilities for the protection of your data. You should have in place policies to:

Ensure your users never share their passwords
Ensure your users change their passwords on a regular basis. For information on setting Password Expiry click here.
Ensure your users log off Web Business Banking if they have to leave their PC
Maintain tight control over the Web Business Banking system by restricting the number of System Administrators

User Measures

As a user of Web Business Banking you also have a responsibility to protect your company’s banking information. You should:

Protect your password. It is your key to accessing Web Business Banking. Do not reveal it to anyone.
Do not use passwords that incorporate your name, telephone number, address or birthday.
Change your password regularly. If you suspect that your password has become compromised, choose a new one immediately. For more information on effective password management practices, click here.
Use a unique password for each system you access.
Do not leave your computer unattended while using any Web Business Banking service.
Store Authentication Devices in a secure place and ensure the PIN is not accessible.
Clear the cache of your browser after visiting secure sites. Browsers generally cache, or locally store, images of pages you have downloaded to enhance performance. By clearing your cache after visiting secure sites, you ensure no one else can view any confidential information you may have transmitted. Please refer to your browser for information on clearing your cache.

® Netscape is a registered trademark of Netscape Communications Corporation.

^®1Microsoft is a registered trademark of Microsoft Corporation in the United States and/or other countries.