Overview
Credit Suisse Security Practices
Security Precautions and Practices
Password Management
Your Obligations, Roles and Responsibilities
Customer Service
Anti-Virus Software
Phishing

OVERVIEW

At Credit Suisse, client confidentiality is the cornerstone of our business and ensuring data security is paramount in every undertaking.

While we have put in place the necessary security practices and measures, as the end user, you play an important role in safeguarding against risks such as those related to virus attacks, unauthorized access and fraudulent online transactions.

Following are practices that you can adopt to protect yourself against these risks, and basic guidelines to help you better understand your role and obligations with respect to online banking.

Top

CREDIT SUISSE SECURITY PRACTICES

Credit Suisse's online security measures are highly sophisticated, multileveled and in line with the exacting standards of the Monetary Authority of Singapore and the Swiss Federal Banking Commission.

We employ the latest encryption technologies and constantly review our security measures to ensure they meet the highest current standards.

128-bit Encryption and 3-tier Security Authentication

Credit Suisse's online banking platform uses a three-tier security system - User ID, Password and SecurID number, and 128-bit encryption to ensure the security of your data. Only you, and those to whom you have nominated, are able to access to your account and portfolio.

When you login to Credit Suisse's online banking platform, a key or lock symbol will appear on the browser status bar. The Bank's website address will also change from "http://" to "https://". This indicates you have established a secure connection with the Bank.

Protecting Your Information

We maintain strict policies and controls with respect to safeguarding your personal information from loss, misuse, or unauthorized alteration.

Your personal data is stored in a password-protected electronic file outside of Credit Suisse's online banking platform. Access to such information is restricted to employees who require the information for purposes of reporting, verification and risk management.

The right of access to your personal and portfolio information are as defined below:-

• To verify your identity and eligibility to receive certain products or services
• To provide information to you about products and services that we believe may be of interest to you
• To record your interest in products and services that we offer
• In response to your requests for information

Automatic Logout Feature

You login session will be automatically terminated when the system detects inactivity for some time. This feature prevents unauthorized access to your information in the event you stepped away from your active session without logging out.

Top

SECURITY PRECAUTIONS AND PRACTICES

Recommended security precautions and practices:

• Check the authenticity of the bank's website by comparing the URL and the Bank's name in its digital certificate before entering your User ID, Password and SecurID number (You can do this by double clicking on the lock symbol).

• Always use the recommended Internet browser such as those that support 128-bit encryption to ensure your online session is protected by most up-to-date security features.

• Check your bank account and transactions frequently and report any discrepancy.

• Install anti-virus software and firewalls in your personal or home computers.

• Regularly update your anti-virus software and firewall products with security patches or newer versions.

• Disable "file and printer sharing" feature in your computer.

• Backup critical data regularly. Consider the use of encryption technology to protect highly sensitive data.

• Log off and turn off your computer when not in use.

• Clear your browser's cache and history after each session so that your account information is removed.

Refrain from :

• Installing software or running programs of unknown origin

• Opening email attachments from unknown senders. Delete junk or chain emails

• Storing or retaining User ID/Name and Password on your system

• Using public or Internet café computers to access Credit Suisse's online banking platform

• Disclosing personal, financial or credit card information to little-known or suspect websites

• Using a computer or a device that cannot be trusted

If you notice unusual activity or unauthorized transactions in your account, please change your password and notify us immediately. Where necessary, your access can be suspended at your request to protect your interest.

Top

PASSWORD MANAGEMENT

Setting your password

Your password …

• should comprise between 6 to 8 digits or alpha numerals

• should not comprise the same digit or character more than twice

• should not be based on User ID, personal telephone number, NRIC number, date of birth or other personal information

Managing your password

Your password must be kept confidential at all times

• Do not share or divulge to anyone

• Do not keep a physical record i.e. store it in your computer hard disk, mobile phone, personal digital assistant or any other insecure means

• Do not enter when someone else can see you entering them

• Do not use the same password for other financial or non-financial web-based services such as email, online shopping and other online subscription services, particularly when they relate to different entities

• Do change your password regularly

• Do change your password immediately if you suspect it has been compromised or exposed to others

Top

YOUR OBLIGATIONS, ROLES AND RESPONSIBILITIES

Your usage of Internet Banking is subject to the Terms of Use and Legal Information and Privacy Policy at all times. You are advised to comply with our recommended security practices to ensure you do not compromise your online security.

The Bank is not responsible for any loss or damage in connection with your use of Internet Banking unless such loss is attributable to our negligence or willful default.

The Bank will not be responsible for your losses resulting from any of the following events:

• Non-compliance with our Terms of Use and Legal Information

• Failure to promptly report any unauthorized access and/or fraudulent transactions on your account

• Failure to report loss or stolen Password/SecurID Card

• Negligent handling, disclosure and/or sharing of Password/SecurID card with third parties

• Erroneous inputs in Internet Banking transactions

• Internet Banking service is not accessible due to system or network unavailability and events beyond our control

You have the right to:

• Request the Bank to suspend your access to Internet Banking should you suspect any unusual activity, unauthorized access or that your Password/SecurID card has been compromised in any manner

• Request the Bank to terminate your access to Internet Banking should you wish to discontinue the service

• Request for a new Password or SecurID Card if you have forgotten/lost or suspect your Password/SecurID card has been exposed

We strongly recommend that you review in detail and adhere to the recommended security practices described under "Security Precautions and Practices" and "Password Management".

Top

If you require assistance or have questions regarding inconsistency or transactional disputes, you should immediately contact your relationship manager or our 24-hour Service Center at (+65) 6212 6000.

Top

ANTI-VIRUS SOFTWARE

To enhance security, you may wish to install anti-virus software in your system. Following is a list of anti-virus software providers** for your reference:

• Symantec: http://www.symantec.com
  
• McAfee: http://www.mcafee.com
  
• F-Secure: http://www.f-secure.com
  
• Trend Micro: http://www.trendmicro.com
• Pest Patrol: http://www.pestpatrol.com

** Credit Suisse makes no representation as to the merchantability, quality or effectiveness of the software. Clients purchasing the software enter into a contract with the vendor and all disputes should be resolved directly with the vendor.

Top

PHISHING

False Websites

Clients are sent e-mails which try to lure them to websites that look very like those of Credit Suisse. By requesting the user ID, password, and/or cancellation list code, unauthorized persons are able to access your login data.

If you have already replied to such an e-mail or provided personal information or confidential data after having clicked on such a link (e.g. account or card number and PIN), please contact Credit Suisse as soon as possible (24-hour Service Center
+65 6212 6000).

We would like to make it absolutely clear that Credit Suisse never requests personal information or confidential data via e-mail.

Security Tips

• Please never reply to this type of e-mail or click on these kinds of links.
• Always use our official internet address when you log in.

SecurID

• Since the access code of SecurID changes every minute, it is not possible for someone to jot down the number and use it later.
• A number that has been entered during this minute cannot be used a second time.
• Customer should not allow anyone to keep, use or tamper with his SecurID token.
• Customer should not reveal the number generated by the SecurID token to anyone.
• Customer should not divulge the serial number of the SecurID token to anyone.
  

Top