There isn't a tool for this, but what you can do to generate a list of all tools available for your credit union is create a template or temporary employee ID in T ool #327 CU*BASE Employee Security and assign it every tool. Then you can use Tool #357 Employee Security Audit Report to un the Employee Security Audit Report. Run it for the assigned tools only and it will print a report listing all the tools assigned to that employee, which in that case would be all the tools. To get this int  More...

There are two recommended resources to review, the webinar, Employee Security from a Practitioner's Standpoint and the booklet, Employee Security Audit . Click the links below to watch the video and to order a copy of the booklet. Both resources are provided free of charge from AuditLink.

Yes. Use Tool #357 “Employee Security Audit Report.

Not every feature that potentially shows account details on an employee's account is governed by the Employee Account Security controls. Apart from technical impracticalities, our basic philosophy has been that employees who are given access to “sensitive” features (like Collections, or posting payrolls, etc.) should be trusted employees, and they should be allowed to use the tools to do their job. If they have to be hobbled or monitored, then perhaps they shouldn’t be tr  More...

Tool # 868 Transaction Override Report allows you to create a report that shows when a transaction override was performed on an account that was frozen, had secured or uncollected funds, as well as transaction overrides to par value (below minimum). This report was added to the Report Scheduler feature with the 15.3 CU*BASE release in December 2015. It is easy to use the Report Scheduler tool to archive monthly reports. Just enter the filter screen and make your selection of which type of ove  More...

Prior to the 16.10 release, the SSA began using multiple Company IDs, and it was recommended that credit unions consider using Automated Funds Transfers (AFTs) to handle distributions. Beginning the 16.10 release a new cross-reference system will be implemented that will automatically funnel all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” With the changes ma  More...

There are several steps in removing a member's Social Security number: 1) Run a global search to see what types of relationship codes the SSN has with your credit union. 2) The first relationship codes you will want to review are the 'CB' or 'JI' which mean the non-member is a co-borrower and/or joint owner on the account. They need to be removed first. To remove them, launch Tool #3 Open/Maintian Memberships/Accounts, choose Update member information then Joint owners an  More...

With the 16.10 release a new cross-reference system was implemented that automatically funnels all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” In cases where the Depositor ID is the same, for example a husband and wife, these ACH transactions will be handled by the same master ACH distribution record under the Depositor ID since duplicate Depositor IDs are no  More...

Special care should be taken when adding distribution records for a member who has more than one deposit coming for the family from the same institution. Take the time to research the member ACH records using the ACH inquiry screen, and if there isn't enough information on this screen, go to CU*SPY and find the PACXTB report to review the ACH detail. For example, the Smith family receives three ACH payments for Social Security benefits: one for the husband, John, one for the wife, Mary, and   More...

Yes, if an online note is programmed in CU*BASE, it will be presented to and signed digitally prior to the loan funding. If the member cancels out and does not sign the form, the loan will not be created. Instead, the system will submit a loan application to be worked in the LOS Loan Queue (Tool #2). Deposit Secured loans do require special loan forms specifically coded for this type of offer. Your standard loan forms cannot be used with this feature without the special coding. f you are anx  More...

Prior to the 16.10 release, the SSA began using multiple Company IDs, and it was recommended that credit unions consider using Automated Funds Transfers (AFTs) to handle distributions. Beginning with the 16.10 release a new cross-reference system will be implemented that will automatically funnel all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” With the chang  More...

The process can vary a bit according to the vendor, but here's a discussion about how it works for credit unions on the CO-OP network, as an example. In most cases, debit card authorizations create a Misc. Secured Shares record on the member's account to hold the funds. When the actual transaction comes in, this record is automatically deleted. (There are exceptions to this rule, such as gas purchases.) A little history: In the past, debit card authorizations would add a hold to an ind  More...

Yes. You won't be able to read the answers to the member, but you can reset (clear) them. This will force the member to set up new answers and/or questions the next time they log in. This can be done two ways: Use Tool #72 Update ARU/Home Banking Access and click the Reset Security Questions button. OR In Inquiry/Phone/Teller, click the Home Banking Mbr button then use F11-Reset Quest.

Tool #569 Online/Mobile/Text Banking VMS Config > Online Banking Password and Security Settings includes a setting labeled Expire stale passwords after xxx days of non-use . This means if a member does not log in within that period of time, they must answer all of their security questions in order to reactivate or change their password, before they can log in. The maximum allowed is 90 days, so a value 6 or 12 months is not currently allowed. Remember that this process expires the passwo  More...

While in the initial Security Code configuration screen, click the printer icon at the top of the screen and a report is produced of the codes configured. (Use the Related Link below to see a picture of this icon.)

There are many, many components in the infrastructure that protects your member data, from passwords and daily backups to production redundancy and full-blown DR/BR plans. One important piece of that puzzle involves the protections we put in place to control data moving between the System i and a local workstation. Years ago no one ever imagined an employee popping a thousand member records onto a thumb drive and heading out the door. Today we have entire teams and sophisticated tools to prev  More...

The information sent to the bureau was not an exact match, but based on the information provided (including name, address, DOB, etc.), the bureau returned a match to the correct SSN. CU*BASE is set up to pull a credit report for applications that are sent from online banking based on the applicant's consent to have their credit pulled within the application. There is not a way for the SSN to be verified as correct or not at the time of the application, but the credit bureau is able to do fur  More...

No, our CSRs will not reset the 2-character CU*BASE Employee IDs for your staff. This must be done by an internal CU security officer. Use Tool #762 Reset Employee ID Password . (This can also be done via Tool #327 CU*BASE Employee Security using the Reset PW option.) It is important that credit unions insure proper training to their employees regarding the expiration of their CU*BASE Employee ID password. We deliver a warning message of expiration 7 business days prior to the staff member.   More...

By using the CU*BASE Account Security feature. This can be done by assigning special Employee Type codes to all employee accounts (see the online help topic below for more information), or by simply changing the account security settings for that particular employee. This can be done only by an authorized security administrator at your credit union. In CU*BASE, launch Tool #327 CU*BASE Employee Security Select the ID for the employee whose access you'd like to adjust and choose Update ac  More...

At some point during the year your credit union's audit firm may contact your credit union to perform a member account verification. This involves sending statements with a special message and unique return address, so that members respond to the auditing firm rather than the credit union directly. Here are some important tips to ensure your audit is successful: CU*Answers cannot change your credit union's return addresses on statements. CU*Answers uses custom statement envelopes for a  More...

The Audit Tracker is simply a special type of Member Tracker. Trackers are used throughout CU*BASE to keep track of member communications, contacts, and events, for an ongoing record of the member's relationship with your credit union. The Audit Tracker is specifically designed to record events for your credit union's internal auditors. This includes things like BSA-related activities, OFAC scans, and the like. See the flyer referenced below for a current list of items recorded automa  More...

IMPORTANT NOTE: When It’s Me 247 was updated in 2021, the “See” option shown on here was made unavailable. There are two major points to consider when thinking about allowing members to see information beyond the account to which they are actually logged in. Both extend beyond online banking to consider a financial institution’s role and responsibility in protecting member private data via all access channels, from the teller line to a back office employee answering   More...

If you need to allow an employee to perform upload and/or download tasks (FinCEN, AIRES, ALM, uploading G/L entries to post, etc.), you must first complete the iShield Security Access Request form and have it signed by your credit union’s designated Security Officer to sign. Once our Client Services team receives your signed form and verifies it, a request will be submitted to our System i administrators, and you will be notified when the new permissions have been granted. This process wi  More...

The CTR did not populate because the system calculation can combine only those transactions that were posted at the same time. In this particular situation the member had seven deposits within a few minutes of each other where the total amount calculated under his Social Security number exceeded the credit union configured CTR flag amount over $10,000. None of the individual amounts he deposited, however, exceed the $10,000. The total excess of $10,000 calculated placed him on your BSA monitor  More...

When you use the filter buttons on the File Maintenance Inquiry dashboard (Tool #159: Audit File Maintenance Inquiry (CUFMNT)), indicators note which programs, fields/columns, and files/tables AuditLink has flagged as “critical” for auditing teams to monitor on a daily basis. You can quickly sort by that indicator and select only those items for a quick scan of maintenance that directly affects member accounts. Below is a listing of these critical items. Columns/Fields Field Why   More...