1 - Security

1.1 Does the National Bank follow a specific code of procedure for the protection of personal information?
1.2 Is there a special department at the National Bank that looks after online security?
1.3 When I do my banking via Internet Banking Solutions, how do you ensure the confidentiality of my transactions?
1.4 What measures have been taken to ensure maximum security and confidentiality?
1.5 What is the "Peace of Mind Guarantee"?
1.6 What is encryption and how does it work?
1.7 What is the difference between 128-bit and 40-bit encryption?
1.8 Why is it important to erase my browser's cache memory?
1.9 What can I do to secure my transactions?
1.10 When I carry out a transaction using Internet Banking Solutions, how can I be sure that my session is secure?
1.11 What is the difference between http and https?
1.12 Is the transmission of information by e-mail secure?
1.13 Are the on-line forms accessible via www.nbc.ca secure?
1.14 What is a cookie?

1 - Security

1.1 Does the National Bank follow a specific code of procedure for the protection of personal information?

In cooperation with other financial institutions and the Canadian Bankers Association, the National Bank has established a code of procedure for the protection of personal information on individual users. This code of procedure, which all employees undertake to follow, ensures that the information about you in your personal file is used only to:

• Properly manage your products and services
• Inform you about other products and services that may be of interest to you
• Meet your expectations more effectively

Only employees who need to access your personal file in the course of their work are allowed to consult it.

[top]

1.2 Is there a special department at the National Bank that looks after online security?

Yes, the National Bank's Information Security group focuses on matters related to security and confidentiality. Its mission is to:

• Identify and manage information security risks, while taking into account their impact on Bank business
• Establish information security policies, strategies and standards
• Assist and advise owners of information in evaluating risks and required levels of protection, and in choosing appropriate security measures
• Make all National Bank employees aware of the importance of information security and of their involvement.

We are also pleased to report that in 2002, the National Bank received an Octas award from the Fédération de l'informatique du Québec, in recognition of the reliable and innovative nature of its leading-edge solutions for on-line security and protection of information.

[top]

1.3 When I do my banking via Internet Banking Solutions, how do you ensure the confidentiality of my transactions?

A number of precautions have been taken to maintain the confidentiality of the information you transmit when you perform your transactions via Internet Banking Solutions. In fact, with the measures already implemented by the National Bank and the preventive measures we recommend to you, your banking transactions are as secure when you do them online as they would be at the counter in your branch.

[top]

1.4 What measures have been taken to ensure maximum security and confidentiality?

To ensure maximum security, a number of measures must be taken by both the client and the Bank.

For the client:

• You must choose a password known only to you
• Regularly change your password. We strongly recommend that you change it at least once a month
• If possible, use a personal firewall
• End the session as soon as you are finished

For the Bank:

• We apply the most rigorous security standards as evidenced by our use of 128-bit encryption (currently the highest level of security commercially available in North America) to protect the confidentiality of your transactions.
• We also ensure your protection by automatically cutting off your session whenever it is inactive for an extended period (6 minutes).

[top]

1.5 What is the "Peace of Mind Guarantee"?

The "Peace of Mind Guarantee" is offered to users of Internet Banking Solutions. This guarantee ensures that you are reimbursed for any losses caused by fraud while banking on the website, even though you took appropriate measures to protect your access number and password. In this case, you must advise National Bank immediately by calling 1-888-4-TELNAT or (514) 394-5555 and cooperate fully with any investigation concerning the fraud.

[top]

1.6 What is encryption and how does it work?

Encryption is a data encoding process that ensures the security of the transmitted data. To be able to read an encrypted file, the client must have access to a secret key protected by a password to decode the information. In other words, regular text is converted into scrambled code (illegible text) during transmission, and is decoded into legible text at the reception point. The two most widely used encryption levels are 40-bit and 128-bit. Given the importance of your financial information, we have opted for 128-bit encryption, one of the most secure systems currently available on the North American market.

[top]

1.7 What is the difference between 128-bit and 40-bit encryption?

128-bit encryption provides significantly more cryptographic protection than 40-bit encryption. It has become increasingly necessary to use longer keys to counter the growing potential for computer-related criminal activity, as demonstrated by a recent study by several leading cryptographers.

"128-" and "40-" bit encryption refer to the size (length) of the key used to encrypt the message. Roughly speaking, 128-bit encryption is 309,485,009,821,345,068,724,781,056 times stronger than 40-bit encryption. Even taking into account Moore's Law, which states that computing power doubles about every 18 months, 128-bit encryption represents a very strong method of encryption for the foreseeable future.

[top]

1.8 Why is it important to erase my browser's cache memory?

To protect the confidentiality of your financial information and improve the performance of your Web browser, we recommend that you erase your cache memory after each Internet Banking Solutions session. This is particularly important if the computer you use for your banking transactions is shared with other users.

Follow these instructions to clear your browser's cache:  Clear cache memory

[top]

1.9 What can I do to secure my transactions?

Simply take the following precautions:

• Never reveal your password, not even to a family member or anyone claiming to be a National Bank employee.
• Never leave personal information in plain view.
• Never leave your computer when carrying out a transaction via Internet Banking Solutions.
• Always sign out from your session by clicking on "Quit" before leaving your computer.
• Always erase your browser's cache memory.
• Never send confidential information by e-mail, unless it is encrypted.
• Avoid using a password that is easy to guess.
• Change your password on a regular basis and do not use the same password more than twice during a year.
• Never use the same password for several software applications.
• Never use a password that contains part of your banking access codes (i.e. Client Card, credit card, PIN).
• Consider installing anti-virus software and a personal firewall on your computer.
• When your Client card is lost or stolen, please immediatly reach our call center Telnat at 1-888-4-Telnat.
• Go through your banking statement thoroughly and acknowledge us of any irregularity.
• Avoid using a software that save your password on the login page of the Internet banking Solutions.

Note: You can find more detailed information in the ABCs of Security. Moreover, remember that the National Bank will never need to obtain your password or Personal Identification Number to provide you with support.

[top]

1.10 When I carry out a transaction using Internet Banking Solutions, how can I be sure that my session is secure?

If you use Mozilla Firefox or Microsoft Internet Explorer :

• A small closed lock will appear in the bottom right corner of your screen, indicating that the session is encrypted.

[top]

1.11 What is the difference between http and https?

Https guarantees that the information transmitted is secure (encrypted). Note that the encryption may be 40-bit or 128-bit.The Bank only uses 128-bit encryption in order to maximize security.

[top]

1.12 Is the transmission of information by e-mail secure?

In general, information contained in e-mail is not protected. However, e-mail attachments can be protected if they are encrypted before transmission. An "ordinary" e-mail should never contain any confidential information unless it is provided on the secure form accessible via our website.

[top]

1.13 Are the on-line forms accessible via www.nbc.ca secure?

Yes. All our forms, including the one for sending e-mails, use 128-bit encryption. The small closed lock located at the bottom of your screen confirms that the form is encrypted.

[top]

1.14 What is a cookie?

A cookie is a feature that enables a browser to store information provided by user and save it in a small text file on the hard disk. For more information, visit our Support section.

[top]