Merrick Bank Security Policy

Protecting Your Internet Security

SECURITY POLICY:

Protecting customers' privacy and security is important to Merrick Bank. In order to help you understand the security measures we take, we have published this security policy.

INTERNET Privacy Pledge:

You can visit this site and find out about our products and services, check on career opportunities, or use other services that may require your account number and a 4-digit password that you choose.

If you do provide personal information, we encourage you to read Merrick Bank's Privacy Pledge.

Use of Cookies:
A cookie is a small file containing information that our web site delivers to your PC's hard drive via your web browser software. Merrick Bank uses cookies that last only through a single session when visiting our web site. However, to access the secured portions of the web site, such as the Cardholder Center, you must allow cookies to be set. None will contain information that will enable anyone to contact you via telephone, email, or any other means. You can set up your web browser to inform you when cookies are set or to prevent cookies from being set. Find out how to do this by choosing "Help" at the top of your browser window.

INTERNET SECURITY:

Safeguarding your personal information is important to us. We have implemented the following measures to enhance the protection of your personal information.

Secure Socket Layer:
Secure Socket Layer or SSL is a protocol for transmitting information securely via the Internet. SSL works by using a private key to encrypt data that is transferred over the SSL connection. The protection strength of SSL is determined by the bit length. Currently, Merrick Bank uses 128-bit encryption. Most Internet browsing software, including Netscape Navigator 4.7 and Microsoft Internet Explorer 5.0 or higher, support SSL, and many web sites use the protocol to transmit confidential information provided by consumers, such as credit card numbers. By convention, web pages that require an SSL connection start with https: instead of http :.

Authentication:
Authentication is the process of identifying an individual, based on a unique username and password. Authentication ensures that the individual is who he or she claims to be. Authentication techniques are used when customers access their Merrick Bank account on-line.

Authorization:
Authorization is the process of allowing the individual access to the appropriate data, after an individual has been properly identified by an authentic user name and password.

Encryption:
Encryption is the translation of data into a secret code, and is an effective way to achieve data security. Merrick Bank uses encryption to protect sensitive information. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. Unencrypted data is called "plain text," encrypted data is referred to as "cipher text."

Firewall:
A firewall is designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of the two. Firewalls are frequently used to prevent unauthorized Internet users from accessing private networks connected to the Internet. Firewalls are designed to protect sensitive customer data. Firewalls are used by Merrick Bank directly or indirectly through contracts with third party vendors.

Testing and Maintenance Devices:
System utilization logs are created on hardware components that comprise the Merrick Bank web site.

Intrusion Detection:
An intrusion detection system (IDS) attempts to detect an intruder breaking into the system or a legitimate user misusing system resources. IDS software is used at Merrick Bank's web site and is constantly working to provide notification when suspicious or illegal activity is detected.

Email:
Merrick Bank strongly discourages customers from sending sensitive information using email.

Physical Security:
All web and database servers associated with Merrick Bank's web site are in locations secured by restricted electronic badge access. Access to the servers is restricted to only those necessary to maintain the server hardware.

TIPS FOR PERSONAL SECURITY:

Merrick Bank wants to help you protect your computer and information. We have compiled the following tips for you to do this. We hope you find this information helpful.

Basic Security:

Virus Management:
Your PC can become infected with a virus when you download programs from the Internet, launch Email attachments or share diskettes. Merrick Bank encourages you to employ safe computing practices that include the following:

PC Software:

PROTECT YOUR IDENTITY AND ACCOUNTS:

Did you know that up to 500,000 individuals each year are victims of identity theft, a fast-growing form of fraud? "Identity theft" or "account takeover fraud" involves criminals stealing a person's personal information. These criminals assume a person's identity and apply for and use credit in the victim's name, harming the victim's credit record.

AVOID BECOMING A VICTIM:

The following information may help you avoid becoming a victim:

By following the above tips, you can help protect yourself against this terrible crime.

SECURITY CONTACT:

If you have security concerns, please email us at Merrick Bank security.