Wednesday, August 20, 2008

Im having my on-the-job training at Bank of the Philippine Islands-Pioneer Branch. I personally asked the New Accounts Clerk about their database system.. The business is for commercial banking. Having many branches of thier banks, they come up with the idea of centralizing the information of their clients. They have a direct information about the client's information submitted during the opening of the account.

For example is when there is a customer that forget to get the account number of the reciever, they were going to present only the name and by entering the name on their computer, the account number will totaly be seen...

By this kind of system, the flow of the transactions are easily done. It only takes a lesser time than having it in a manual basis. This is the advantage of database to the business.

There is a law that citing a bank secrecy. The bank cant tell the balances of the account even you are the behalf, unless the account was opened as a joint account or the owner was died and you are the nearest kin.. Its disadvantage is when the clients is inquiring via phone only asking for the bank balance, the secrecy of it have a tendency that the banker can tell the balance because wherever branch it was opened, they have an access on it specifically that it is a BPI account.


Jeazle Mae G. Hassan

Monday, August 11, 2008

Midterm Blog # 2...

BANK OF THE PHILIPPINE ISLANDS- We'll take you farther.

BPI Express Online's Security Measures(How the company protect their services from Internet)

Because the security is the prime concern, customers are assured that at BPI, they are continually implementing measures to ensure the safety of clients Internet banking transactions done via BPI Express Online. BPI adheres to the best security practices by using different tools, methods, and processes to protect their customer's account information and banking transactions:


They employ security products, such as intrusion detection system and firewalls, and other internal controls which are meant to safeguard, physically and logically, all their servers and information systems, including the data stored in these systems.


Access to all of BPI's websites (BPI Express Online, BPI Expressbills, BPI Expresslink, and BPI Trade) are secured using Verisign's Security Certificate which enables SSL for end-to-end encryption and you to verify the authenticity of their sites.


Certain transactions involving third parties -- Check-Free Payments for credit cards and loans and all third party funds transfers require clients signature on the enrollment form submitted to bank for verification. With this policy, clients are assured that BPI will honor requests only for payments/transfers to those the clients specifically signed for.
For added protection, BPI also encourage clients to do their part:
1.)
Securely manage your(client) password


Use a password that is easy for you (client) to remember but hard for other to guess.


Ensure that you (clients) keep your password confidential at all times by not writing it or divulging to anyone.


Do not use the "save and remember the password" browser feature.


Ensure immediate change of your password if you think it has been compromised.
2.)
Protect your computer against viruses, malicious programs, and hacking attacks. There are attacks which can capture your keystrokes, including your password and other personal information, and send them to another person without your consent.


Ensure that you install an anti-virus software and update it regularly. Keep the engine and pattern definitions up-to-date to prevent viruses from going into your PC.


Do not download any software from a website that is of doubtful origin.


Install a spyware or malware removal program. Spyware or malware programs can take control of your PC's system with the purpose of stealing valuable information.


Install the latest patches and service packs on your operating system, browser, and e-mail programs to prevent system vulnerability-related attacks.
3.)
Do not become a victim of Phishing attacks. Phishing uses e-mails and websites, purporting to be legitimate banks, to request recipients to update their login and account information. We suggest that you use this short checklist to protect yourself against phishing attacks.


Begin your session by manually typing the web address of BPI into your browser. The official URL of BPI Express Online is www.bpiexpressonline.com.


Avoid disclosing personal or account details via email or embedded link. Be skeptical of unsolicited e-mails, especially those that concern personal / account information. Delete suspicious e-mails or e-mail attachments without opening them, even if they seem to have originated from someone you know.


Notify the sending company if you receive a suspicious e-mail. Contact us directly through Express Phone 89-100 or e-mail us at expressonline@bpi.com.ph.


Check the security certificate of the web page. Before entering personal or account information into a site, make sure it is secure. In Internet Explorer, you can do this by checking the yellow lock on the status bar. A closed lock is an indication of an encrypted site.

If you think you may have responded to a suspicious e-mail, change your password as soon as possible. To change your password, login to www.bpiexpressonline.com and go to Account Maintenance --> Change Password.
4.)
As much as possible, avoid doing Internet banking transactions using public computers such as those in the Internet cafes. Should you, however, need to do so, we suggest that you close the browser after logging off. We also advise you to change your password immediately when a private computer is already available to you.



Risk that company encountered:

1. Text Scam;wherein a recipient of a text message is informed through short messaging service or “text” that he won millions of pesos in a raffle draw purportedly sponsored by the Bangko Sentral ng Pilipinas (BSP), the Philippine Charity Sweepstakes Office (PCSO), the Philippine Amusement and Gaming Corporation (PAGCOR), or other institutions. The swindlers who use fictitious names or pose as government officials would try to get their victim to deposit certain amounts of money in a particular bank account designated by the swindlers, supposedly for tax payments and other fees, as a precondition to getting the alleged prize. Once the victim deposits the money, the swindlers immediately withdraw the same, and the victim will no longer be able to get in touch with the swindlers again.

2. Phishing Emails;are sent to trick clients into revealing personal and financial information.




JEAZLE MAE G. HASSAN