Appearance

Security Best Practices ​

This guide outlines essential security practices for handling sensitive information and maintaining data protection standards in Banclo.

Overview ​

As a financial institution, protecting client data is our highest priority. Every team member plays a crucial role in maintaining security. This guide provides practical steps to ensure you handle data safely and comply with regulations.

Task Security ​

Understanding Task Classifications ​

Banclo uses two security classifications for tasks:

  1. Visibility Classification

    • Client-Visible Tasks: Standard tasks that clients can see and interact with
    • Internal Tasks: Bank-only tasks hidden from clients

  2. Sensitivity Classification

    • Regular Tasks: Standard information without special handling requirements
    • Sensitive Tasks: Contain confidential data requiring access tracking

Handling Sensitive Tasks ​

When working with sensitive tasks:

  1. Only Access When Necessary

    • Have a clear business reason before viewing sensitive data
    • Remember that all access is logged and audited

  2. Be Aware of the Warning

    • A dialog appears before showing sensitive data
    • This is your reminder that access will be tracked
    • Click "Continue" only if you need to see the information

  3. Minimize Exposure

    • View sensitive data only as long as necessary
    • Close the task when finished
    • Don't leave sensitive information displayed on your screen

  4. Never Share Screenshots

    • Don't take screenshots of sensitive task data
    • Don't share sensitive information via email or chat
    • Use Banclo's secure communication features instead

Document Security ​

Uploading Documents ​

When uploading documents:

  • Verify you're uploading to the correct loan application
  • Check that documents don't contain unrelated personal information
  • Ensure scanned documents are clear and complete
  • Use descriptive filenames that don't contain sensitive data

Downloading Documents ​

When downloading documents:

  • Save files only to secure, authorized locations
  • Don't save to personal devices or cloud storage
  • Delete local copies when no longer needed
  • Never email documents outside the Banclo system

Access Control ​

Password Security ​

  1. Strong Passwords

    • Use complex passwords with mixed characters
    • Never reuse passwords across systems
    • Change passwords regularly

  2. Never Share Credentials

    • Each user must use their own login
    • Sharing accounts violates security policy
    • All actions are tracked to individual users

  3. Lock Your Workstation

    • Always lock your screen when away from your desk
    • Log out completely at end of day
    • Don't leave Banclo open on shared computers

Permission Management ​

  • Only request access to areas you need for your job
  • Report if you have access to areas you shouldn't
  • Notify administrators when team members leave or change roles
  • Review your permissions regularly

Data Handling ​

Client Information ​

  1. Principle of Least Privilege

    • Only access client information you need for your current task
    • Don't browse through applications out of curiosity
    • Respect client privacy at all times

  2. Verbal Discussions

    • Discuss client information only in private settings
    • Be aware of who might overhear conversations
    • Use client IDs rather than names when possible

  3. Written Communications

    • Use Banclo's internal messaging for sensitive discussions
    • Avoid putting sensitive data in email subjects
    • Double-check recipients before sending messages

Working from Home ​

When working remotely:

  • Use only company-approved devices
  • Connect through secure VPN
  • Ensure privacy from family members or visitors
  • Don't print sensitive documents at home
  • Lock devices when not in use

Incident Response ​

Recognizing Security Incidents ​

Watch for these warning signs:

  • Unusual system behavior or error messages
  • Unexpected access to your account
  • Missing or altered documents
  • Suspicious emails requesting information
  • Unknown users accessing sensitive data

Reporting Incidents ​

If you suspect a security issue:

  1. Act Immediately

    • Don't wait to report suspicions
    • Time is critical in security incidents

  2. Contact Security Team

    • Use the designated security hotline
    • Provide all relevant details
    • Follow up in writing

  3. Preserve Evidence

    • Don't delete suspicious emails
    • Take screenshots of unusual behavior
    • Note times and details of incidents

  4. Don't Investigate Alone

    • Let security professionals handle investigations
    • Don't access areas to "check" on security
    • Follow security team instructions

Compliance Requirements ​

Audit Readiness ​

Always be prepared for audits by:

  • Following all security procedures consistently
  • Documenting your actions when required
  • Keeping your training certifications current
  • Understanding relevant regulations

Regular Training ​

  • Complete all assigned security training on time
  • Stay updated on new security policies
  • Ask questions if procedures are unclear
  • Suggest improvements to security practices

Common Mistakes to Avoid ​

  1. Leaving Sensitive Data Visible

    • Don't walk away with sensitive tasks open
    • Clear your screen before meetings
    • Position monitors away from public view

  2. Using Personal Email

    • Never forward work documents to personal email
    • Don't access Banclo from personal devices
    • Keep work and personal data separate

  3. Ignoring Security Warnings

    • Take all security alerts seriously
    • Don't disable security features
    • Report recurring security warnings

  4. Informal Data Sharing

    • Don't share data via USB drives
    • Avoid informal file sharing services
    • Use only approved collaboration tools

Quick Security Checklist ​

Daily tasks:

  • [ ] Lock screen when leaving desk
  • [ ] Check for suspicious emails
  • [ ] Verify recipients before sending sensitive data
  • [ ] Close sensitive tasks after viewing

Weekly tasks:

  • [ ] Review recent access to sensitive data
  • [ ] Check for unusual account activity
  • [ ] Clear unnecessary downloaded files
  • [ ] Update passwords if prompted

Monthly tasks:

  • [ ] Review your access permissions
  • [ ] Complete security training assignments
  • [ ] Check for security policy updates
  • [ ] Report any security concerns

Remember ​

Security is everyone's responsibility. By following these practices, you help protect:

  • Our clients' sensitive information
  • Our institution's reputation
  • Your colleagues and yourself
  • Our regulatory compliance

When in doubt, always choose the more secure option. It's better to ask for clarification than to risk a security breach.

Getting Help ​

For security questions or concerns:

  • Contact your immediate supervisor
  • Reach out to the security team
  • Consult the detailed security policy manual
  • Use the anonymous security tip line if needed

Your vigilance and adherence to these practices make Banclo a trusted partner for our clients.