Reso 2014-2242 - Laserfiche WebLink

Home Browse Search

provide the Administrator(s) initially designated by Customer with an initial individual password to gain access to the Services. The Administrator(s) and Authorized User(s) must change his or her individual password from time to time for security purposes, as prompted by the Bank Internet System or more frequently. 6.2 Customer acknowledges that the Administrator(s) will, and Customer authorizes the Administrator(s) to, select other Administrators and Authorized Users by issuing to any person a unique Login ID and password. Customer further acknowledges that the Administrator(s) may, and Customer authorizes the Administrator(s) to, change or de- activate the unique Login ID and /or password from tune to time and in his or her sole discretion. 6.3 Customer acknowledges that, in addition to the above individual passwords, access to the Services includes, as part of the Access Devices, a risk - based authentication security procedure at log -in for Customer. including Customer's Administrator and Authorized Users. This additional security procedure involves an additional credential for cacti user that is in addition to Login IDs and individual password security (hereinafter " Fnhanced Log -in Security "). With Enhanced Log -in Security, additional information regarding each Authorized Uscr's computer and method of website access will be collected and validated automatically with the set- up process. An electronic access identity will be created for cacti Authorized User by combining a number of key identification points, such as 11' address, Internet service provider. PC and browser settings, time of day and geographic location. These access identities are used by Bank to authenticate Authorized Users. Further authentication may occur automatically due to the detection of unusual source occurrences in relation to that access identity. An additional security procedure incorporates use of a physical security device or token ("Token ") for certain transactional functionality associated with ACT transactions and wire transfers. A Token will be issued to any Authorized Uscr(s), for example, for use in initiating and /or approving ACFI transactions and wire transfers. Notwithstanding the foregoing, Bank reserves the right to incorporate the use of Tokcns for certain other functionality from time to time, in its sole discretion, including by way of example only and not by way of limitation, the use of Tokens with certain administrative functionality and for the creation of ACII and wire templates. Physical security of each "Token is Customer's sole responsibility. With the Token, cacti Authorized User will receive a PIN number that the Authorized User must keep in a secure place. When an Authorized User leaves Customer's employ, his or her Login 11) must be deleted and. if a Token had been issued to such Authorized User, Bank must be promptly notified so that Bank may deactivate such Authorized User's Token. Any additional Authorized User requiring a Token must be authorized. in writing by Customer to Bank, for Token creation or rc- creation and deployment. It- applicable. ices may be assessed for additional Tokens. 6.4 Customer further acknowledges and agrees that all wire transfers and ACII transactions initiated through the Services incorporate "dual control" or separation of duties. With this additional security feature. one Authorized User will be permitted to create. edit. cancel. delete and restore ACT batches or wire transfer orders under his /her unique Login ID. password and Token: a second dillerenl Authorized User with his /her own unique Login ID. password and Token will be required to approve. release or delete ACII batches or wire transfer orders. 6.5 Customer accepts as its sole responsibility the selection, use. protection and maintenance of confidentiality of and access to. the Access Devices. Customer agrees to take reasonable precautions to safeguard the Access Devices and keep them confidential. Customer agrees not to reveal the Access Devices to any unauthorized person. Customer further agrees to notify Cash Management Customer Care immediately at 1 -866- 475 -7262 if Customer believes that the confidentiality of the Access Devices has been compromised in any manner. 6.6 The Access Devices identify and authenticate Customer (including the Administrator and Authorized Users) to Bank when Customer accesses or uses the Services. Customer authorizes Bank to rely on the Access Devices to identify Customer when Customer accesses or uses any of the Services, and as signature authorization for any Payment, transfer or other use of the Services. Customer acknowledges and agrees that Bank is authorized to act on any and all communications or instructions received using the Access Devices. regardless of whether the communications or instructions are authorized. Bank owns the Access Devices, and Customer may not transfer them to any other person or entity. 6.7 Customer acknowledges and agrees that the Access Devices and other security procedures applicable to Customer's use of the Services and set forth in this Appendix. as well as such security best practices as described by Bank from time to time and made available on the Bank Internet System, arc a commercially reasonable method for the purpose of verifying whether any Payment. transfer or other use of the Services was initiated by Customer. Customer also agrees that any election Customer may make to change or waive any optional security procedures recommended by Bank is at Customer's risk and that any loss resulting in whole or in part from such change or waiver will be Customer's responsibility. Customer further acknowledges and agrees that the Access Devices are not intended, and that it is commercially reasonable that the Access Devices are not intended. to detect any errors relating to or arising out of a Payment. transfer or any other use of the Services. 6.8 If Customer has reason to believe that any Access Devices have been lost, stolen or used (or may be used) or that a Payment or other use of the Services has been or may be made with any Access Devices without Customer's permission. Customer must contact its Administrator and Bank. In no event will Bank be liable I'm- any unauthorized transaction(s) that occurs with any Access Devices. 112ol l