Security Policy

First Bank Hampton is pleased to offer internet banking. Delivering these services requires a solid security framework that protects you and our institution's data from outside intrusion. We are committed to working with our internet service and communications providers to produce the safest operating environment possible for our customers. The information below summarizes our security framework, which incorporates the latest proven technology. A section at the end also summarizes your responsibilities as a user of the internet banking system regarding security. There are several levels of security within our security framework. User Level deals with cryptography and Transport Layer Security (TLS) protocol and is the first line of defense used by all customers accessing our Banking Server from the public internet. Server Level focuses on firewalls, filtering routers, and our trusted operating system. Host Level deals specifically with our internet banking and the processing of secure financial transactions.

There are several components of User Level security that ensure the confidentiality of information sent across the public internet. The first requires your use of a current and fully patched internet browser. TLS utilizes highly effective cryptography techniques between your browser and our server to ensure that the information being passes is authentic, cannot be deciphered, and has not been altered in route. TLS also utilizes a digitally signed certificate which ensures that you are truly communicating with the Online Banking Server and not a third party trying to intercept the transaction.

After a secure connection has been established between your browser and our server, you then provide a valid User ID and a Security Code (password) to gain access to the services. This information is encrypted, logged by the server forming another complete physical security layer to protect the server's information and a request to log on the system is processed. Although TLS utilizes proven cryptography techniques, it is important to protect your User ID and Security Code from others. You must follow the Security Code parameters we specify at the time you sign up for an internet banking account. We also recommend changing your Security Code often. Session time-outs and limit on the number of log-on attempts are examples of other security measures in place to ensure that inappropriate activity is prohibited at the User Level. 

All transactions sent to our Banking Server must first pass through a filtering router system. These filtering routers automatically direct the request to the appropriate server after ensuring the access type is through a secured browser and nothing else. The routers verify the source and destination of each network packet and manage the authorization process of letting packets through. The filtering routers also prohibit all other types of internet access methods at this point. This process blocks all non-secured activity and defends against inappropriate access to the server. 

The Banking Server is protected using the latest firewall platform. This platform defends against system intrusions and effectively isolates all but approved customers financial requests. The platform secures the hardware running on the online applications and prevents associated attacks against all systems connected to the Banking Server. The system in monitored 24 hours a day, seven days a week, for a wide range of anomalies to determine if attempts are being made to breach our framework. 

Once Authenticated, the customer can process authorized internet banking using host data. In addition, communication time-outs ensure that the request is received, processed, and delivered within a given time frame. Any outside attempt to delay or alter the process will fail. Further password encryption techniques are implemented at the host level, as well as additional security logging and another complete physical security layer of protect the host information itself. 

While our service provider continues to evaluate and implement the latest improvements in internet security technology, user of the online banking system also have a responsibility for the security of their information and should always follow the recommendations listed below:

When you follow these simple security measures, your interaction with online banking system will be completely confidential. We look forward to serving your online banking and bill payment needs both today and into the future- securely!

First Bank Hampton

Revised June 2013