Yes. Use Tool #357 “Employee Security Audit Report.

Not every feature that potentially shows account details on an employee's account is governed by the Employee Account Security controls. Apart from technical impracticalities, our basic philosophy has been that employees who are given access to “sensitive” features (like Collections, or posting payrolls, etc.) should be trusted employees, and they should be allowed to use the tools to do their job. If they have to be hobbled or monitored, then perhaps they shouldn’t be tr  More...

Tool # 868 Transaction Override Report allows you to create a report that shows when a transaction override was performed on an account that was frozen, had secured or uncollected funds, as well as transaction overrides to par value (below minimum). This report was added to the Report Scheduler feature with the 15.3 CU*BASE release in December 2015. It is easy to use the Report Scheduler tool to archive monthly reports. Just enter the filter screen and make your selection of which type of ove  More...

Prior to the 16.10 release, the SSA began using multiple Company IDs, and it was recommended that credit unions consider using Automated Funds Transfers (AFTs) to handle distributions. Beginning the 16.10 release a new cross-reference system will be implemented that will automatically funnel all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” With the changes ma  More...

There are several steps in removing a member's Social Security number: 1) Run a global search to see what types of relationship codes the SSN has with your credit union. 2) The first relationship codes you will want to review are the 'CB' or 'JI' which mean the non-member is a co-borrower and/or joint owner on the account. They need to be removed first. To remove them, launch Tool #3 Open/Maintian Memberships/Accounts, choose Update member information then Joint owners an  More...

With the 16.10 release a new cross-reference system was implemented that automatically funnels all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” In cases where the Depositor ID is the same, for example a husband and wife, these ACH transactions will be handled by the same master ACH distribution record under the Depositor ID since duplicate Depositor IDs are no  More...

Special care should be taken when adding distribution records for a member who has more than one deposit coming for the family from the same institution. Take the time to research the member ACH records using the ACH inquiry screen, and if there isn't enough information on this screen, go to CU*SPY and find the PACXTB report to review the ACH detail. For example, the Smith family receives three ACH payments for Social Security benefits: one for the husband, John, one for the wife, Mary, and   More...

Yes, if an online note is programmed in CU*BASE, it will be presented to and signed digitally prior to the loan funding. If the member cancels out and does not sign the form, the loan will not be created. Instead, the system will submit a loan application to be worked in the LOS Loan Queue (Tool #2). Deposit Secured loans do require special loan forms specifically coded for this type of offer. Your standard loan forms cannot be used with this feature without the special coding. f you are anx  More...

Prior to the 16.10 release, the SSA began using multiple Company IDs, and it was recommended that credit unions consider using Automated Funds Transfers (AFTs) to handle distributions. Beginning with the 16.10 release a new cross-reference system will be implemented that will automatically funnel all incoming company IDs from the Social Security Administration and treat them as if they came from one, consistent company ID we’re referring to as the “Primary ID.” With the chang  More...

The process can vary a bit according to the vendor, but here's a discussion about how it works for credit unions on the CO-OP network, as an example. In most cases, debit card authorizations create a Misc. Secured Shares record on the member's account to hold the funds. When the actual transaction comes in, this record is automatically deleted. (There are exceptions to this rule, such as gas purchases.) A little history: In the past, debit card authorizations would add a hold to an ind  More...

Yes. You won't be able to read the answers to the member, but you can reset (clear) them. This will force the member to set up new answers and/or questions the next time they log in. This can be done two ways: Use Tool #72 Update ARU/Home Banking Access and click the Reset Security Questions button. OR In Inquiry/Phone/Teller, click the Home Banking Mbr button then use F11-Reset Quest.

Tool #569 Online/Mobile/Text Banking VMS Config > Online Banking Password and Security Settings includes a setting labeled Expire stale passwords after xxx days of non-use . This means if a member does not log in within that period of time, they must answer all of their security questions in order to reactivate or change their password, before they can log in. The maximum allowed is 90 days, so a value 6 or 12 months is not currently allowed. Remember that this process expires the passwo  More...

While in the initial Security Code configuration screen, click the printer icon at the top of the screen and a report is produced of the codes configured. (Use the Related Link below to see a picture of this icon.)

There are many, many components in the infrastructure that protects your member data, from passwords and daily backups to production redundancy and full-blown DR/BR plans. One important piece of that puzzle involves the protections we put in place to control data moving between the System i and a local workstation. Years ago no one ever imagined an employee popping a thousand member records onto a thumb drive and heading out the door. Today we have entire teams and sophisticated tools to prev  More...

The information sent to the bureau was not an exact match, but based on the information provided (including name, address, DOB, etc.), the bureau returned a match to the correct SSN. CU*BASE is set up to pull a credit report for applications that are sent from online banking based on the applicant's consent to have their credit pulled within the application. There is not a way for the SSN to be verified as correct or not at the time of the application, but the credit bureau is able to do fur  More...

No, our CSRs will not reset the 2-character CU*BASE Employee IDs for your staff. This must be done by an internal CU security officer. Use Tool #762 Reset Employee ID Password . (This can also be done via Tool #327 CU*BASE Employee Security using the Reset PW option.) It is important that credit unions insure proper training to their employees regarding the expiration of their CU*BASE Employee ID password. We deliver a warning message of expiration 7 business days prior to the staff member.   More...

By using the CU*BASE Account Security feature. This can be done by assigning special Employee Type codes to all employee accounts (see the online help topic below for more information), or by simply changing the account security settings for that particular employee. This can be done only by an authorized security administrator at your credit union. In CU*BASE, launch Tool #327 CU*BASE Employee Security Select the ID for the employee whose access you'd like to adjust and choose Update ac  More...

IMPORTANT NOTE: When It’s Me 247 was updated in 2021, the “See” option shown on here was made unavailable. There are two major points to consider when thinking about allowing members to see information beyond the account to which they are actually logged in. Both extend beyond online banking to consider a financial institution’s role and responsibility in protecting member private data via all access channels, from the teller line to a back office employee answering   More...

If you need to allow an employee to perform upload and/or download tasks (FinCEN, AIRES, ALM, uploading G/L entries to post, etc.), you must first complete the iShield Security Access Request form and have it signed by your credit union’s designated Security Officer to sign. Once our Client Services team receives your signed form and verifies it, a request will be submitted to our System i administrators, and you will be notified when the new permissions have been granted. This process wi  More...

The CTR did not populate because the system calculation can combine only those transactions that were posted at the same time. In this particular situation the member had seven deposits within a few minutes of each other where the total amount calculated under his Social Security number exceeded the credit union configured CTR flag amount over $10,000. None of the individual amounts he deposited, however, exceed the $10,000. The total excess of $10,000 calculated placed him on your BSA monitor  More...

These symbols print when the printer doesn't know what graphic or font to use for the logo, signature, or MICR line. There are a few possible causes: Is this a new printer? If this is a new printer, the first thing to consider is whether the other printers at the credit union use Check Secure devices. Check Secure devices are no longer sold and are not compatible with new printer hardware. To transition from Check Secure devices to the new software based check printing methods, contact CU  More...

There is a credit union-level on/off flag where you can disable auto-security as an option for ALL of your employees. To access this, launch Tool #327 Employee Security and use the CU Options button. If auto-security is enabled, anyone can choose to activate it if they wish, either manually by clicking the button at the bottom of the home page, or via their Preferences. As a compromise, if you have some employees who share workstations and therefore need to be able to enter an ID as they acc  More...

When you use the filter buttons on the File Maintenance Inquiry dashboard (Tool #159: Audit File Maintenance Inquiry (CUFMNT)), indicators note which programs, fields/columns, and files/tables AuditLink has flagged as “critical” for auditing teams to monitor on a daily basis. You can quickly sort by that indicator and select only those items for a quick scan of maintenance that directly affects member accounts. Below is a listing of these critical items. Columns/Fields Field Why   More...

While it is possible that an issue someone runs into on a website is an issue with the web server or a programming issue with the site, it is very important to rule out any browser or workstation incompatibilities first. If the website is not being opened in a supported browser, for instance, it can cause errors that would otherwise not exist. So what are some standard troubleshooting steps than can be taken? Are you using the latest version of your browser? Just like any other piece of software  More...

GUAPPLE is short for GOLD Update Appliance. The GUAPPLE is a stand-alone network appliance that takes the place of the GOLD-Master update server PC. It is designed to seamlessly handle all of your GOLD software update retrieval tasks. No effort is required to retrieve software updates when using a GUAPPLE device. It will acquire GOLD update files automatically as well as custom loan screen updates, doing away with manually downloading and extracting software update files. One GUAPPLE unit  More...