CU Security Practices

BFSFCU meets or exceeds industry best practices to ensure that your online financial transactions with us are secure and private. We have instituted multiple layers of physical and electronic security both to protect your personal and financial information in our facilities as well as when you access your accounts online. Our security policies and procedures are reviewed periodically and adjusted as we implement emerging security technology solutions to keep your information safe.

Secure Transmission & Encryption
When using the Internet to conduct transactions or submit personal information to legitimate organizations, it is critical that the transmission of the information be handled in a secure manner. We use industry standard 128-bit Secure Socket Layer technology to protect the exchange of information with our members.

This standard Internet protocol encrypts sensitive data prior to its transmission over the Internet to a secured server at BFSFCU which maintains the secret key necessary to decrypt the information and then encrypt the response. The 128-bit SSL technology ensures that the BFSFCU Online Banking service communicates in a secure way with our members, designed to prevent eavesdropping, tampering, and message forgery.

Server & Application Security

Bank-Fund Staff Federal Credit Union computer networks are protected by multiple layers of enterprise level security applications. These services work together to ensure the safe storage, transmission, and protection of confidential personal and financial data. Below is a list of some of the many proactive and preventative measures that we employ:

• Firewalls
• Intrusion Detection System
  
• Application Layer Filtering
  
• System Monitoring and Logging
  
• Enterprise Level Anti-Virus Protection

Security Policies & Processes
At Bank-Fund Staff Federal Credit Union, we have strict privacy policies and procedures in place to safeguard how member personal and financial information is stored, transmitted, and secured. BFSFCU will not trade, rent or sell your personal information, including e-Mail addresses – to anyone. The following are some of the stringent processes we enforce to help protect your personal and account information:

• Protocols and Permissions
  
• Office and Branch security
  
• Data Security
• Data Backup
  
• Security Audits