Security

Safety is our focus

Security Savings Bank is pleased to offer electronic banking and bill payment services over the Internet. We make every effort to protect your online information by using the security built into your browser in combination with our own security infrastructure.

Our Online Banking system brings together a combination of security technologies to protect data, you, and the Bank. Our system features password-controlled system entry, a VeriSign-issued Digital ID for the Bank's server, the Secure Sockets Layer (SSL) protocol for data encryption, and a firewall to regulate the inflow and outflow of server traffic.

While we have taken extensive steps to enhance the security of your private financial information, we felt it important to share with you helpful hints you can use to enhance security when you access the Internet.

www.securitysb.com is a VeriSign Secure Site

Security Savings Bank has registered our secure Web sites with VeriSign and use VeriSign Server IDs. VeriSign Server IDs enable our online customers to verify the authenticity of our secure Web site and to communicate with our Web site securely via SSL (Secure Sockets Layer) encryption. SSL encryption is designed to protect confidential information (e.g., credit card numbers, online forms, and financial data)-from unauthorized disclosure while in transit from your computer to ours.

We encourage you to "click" at any time on the VeriSign icon listed in the footer of each page on our site in order to verify that: `

• This site has a VeriSign Secure Server ID.
• This site legitimately runs under the auspices of Security Savings Bank.
• Information sent to this site via an encrypted SSL connection is protected against unauthorized disclosure to third parties.

Secure Access and Verification of User Authenticity

To begin a session with our Internet banking system, you are required to enter a unique Sign-On ID and Password. Upon successful sign-on, the Digital ID from VeriSign authenticates your computer's identity and a secure socket layer connection is established between your computer and the Bank.

Our Online Banking system allows five (5) invalid sign-on attempts before preventing a potential user from further sign-on attempts. After five unsuccessful sign-on attempts, the system locks the potential user out, requiring the Bank to reset your Password.

Secure Data Transfer

Once the server session is established, the user and the server are in a secure environment. Data traveling between the user and the server is encrypted using the Secure Sockets Layer (SSL) protocol. An encrypted SSL connection requires all information sent between a client and a server to be encrypted by the sending software and decrypted by the receiving software, thus providing a high degree of confidentiality. Moreover, an encrypted SSL connection is equipped with a mechanism for detecting tampering - that is, for automatically determining whether data sent over the encrypted connection has been altered in transit.

Other Security Measures

As part of Security Savings Bank's effort to limit access to its servers to authorized users performing appropriate functions, Security Savings Bank takes several measures.

1. Network Security and Monitoring

Electronic requests received over the Internet by Security Savings Bank are subject to monitoring and validation for authenticity and appropriateness.

Electronic requests are filtered through a combination of computer hardware and software designed to protect against inappropriate requests. This is accomplished by filtering Internet traffic and allowing only the traffic that is necessary to send acceptable data requests, such as retrieving web pages or sending inquiries, to access the Bank's servers. We also monitor Internet traffic for suspicious or potentially harmful activity and take appropriate actions to prevent such traffic. These actions may include the implementation of restrictions that prevent access to securitysb.com from an IP network that services specific high-risk geographical areas.

2. Termination of Inactive Connections

Our Online Banking system will terminate your Online Banking session after a set period of time if you are not actively using the system.

3. Display of Information

Your Password, and certain other private information, will never be displayed on your computer screen or, after the initial registration, in any form of correspondence with Security Savings Bank. In addition, our Online Banking system encrypts stored password files and disables passwords that haven't been used by a customer in six months.

4. Your Browser's Security

We require the use of a secure browser with 128-bit encryption to access account information and perform transactions. Microsoft® Internet Explorer, Netscape Navigator®, and Netscape Communicator are all secure browsers. However, the 128-bit encryption is an optional feature and may not be available outside of the United States and Canada.

Since 128-bit encryption is optional for Microsoft and Netscape Internet browsers, you should check your browser to determine if it has 128-bit encryption by clicking on "Help" and "About" in your browser's menu.

If you are not using one of these browsers, or if you feel your browser does not meet the 128-bit encryption security requirements of Security Savings Bank, upgrade your browser here.

Remember that once you've downloaded the proper browser, you must install it on your computer. Follow the browser manufacturer's instructions that appear on your screen.

Secure browsers employ secure sockets layer (SSL) technology to communicate with servers. This technology encrypts-or scrambles-your account information in order to prevent anyone other than the Bank from reading it.

During an encrypted session, Netscape displays a small, unbroken key or lock at the bottom left-hand corner of your screen while Microsoft browsers display a lock.

Your Responsibility

While Security Savings Bank takes steps to protect the confidentiality of your online information, we can't do it alone. You also share in the responsibility for the security of your account information and should always follow the recommendations listed below.

1. NEVER reveal your Sign-On ID or Password to anyone - ever!

• You are the only one who should know your Password.
• While we will make every reasonable effort to maintain the privacy and security of your account information, we cannot be responsible for the confidentiality of your Password once it has been received by you.
• No employee of Security Savings Bank will contact you and ask for your identification and Password.

2. If you suspect someone knows your Password, change it immediately online.

• To change your Password online, simply sign-on using your Sign-On ID and Password. Once you are signed on, click on the "User Options" link, then "Change Password." This will allow you to designate a new Password and then click on "Change Password" again.
• Always keep in mind that you should NEVER share your password with anyone.

3. Don't leave your PC while you are logged in to the Online Banking system.

• When you finish your online banking session, use the Signoff button to leave the online banking system before visiting other Web sites.

4. If other people have access to your PC, clear your browser's cache in order to remove copies of web pages that may have been stored temporarily on your system. Refer to your browser's Help file for instructions on clearing your cache.

We look forward to serving your Online Banking and Bill Payment needs both today and into the future - securely!