iBB Security Page

Working together to stay secure.

iBB provides best in class security for business banking online. However, in order to maintain the highest level of security, our customers must also play their part. This means ensuring that the computers your company uses to access iBB are safe and well protected, that the administration procedures you have in place to manage access are robust and that your users are aware of their individual responsibilities.

iBB - what we do to protect you

AIB uses several layers of technology to provide the most up-to-date security systems with our Internet Banking services to ensure confidentiality and integrity to our customers.

• Two Factor Authentication - your unique Digipass and a confidential Passphrase.
• Encryption - Secure Internet transmission of all data.
• Centralised Monitoring - incident management services.

Back to the top

What you need to do to protect yourself

You are responsible for the actions of the users that you have nominated to access iBB. Good online security can be achieved by following these simple steps to stay safe.

Your Computers

• Firewall - make sure it is active before accessing iBB.
• Anti-virus software - make sure your antivirus is working and up to date.
• Malware-spyware- scan for any hidden tracking applications - then remove.
• Updates - keep your system up to date for the best protection against ever-changing risks online.

Local Administrators

• User responsibilities - make sure that individual users understand their responsibilities.
• Appropriate User Access - assign users only the privileges that they need to do their jobs.
• Segregate Roles - One user should not be able to create and authorise a payment. Two users should validate and authorise payments.
• Dual Admin Authorisation - double the safeguards by requiring 2 administrators to make role changes.
• Housekeeping - Review user access regularly. Make sure ex-staff are removed from the system.

Your iBB Users

• Passphrase and Digipass - memorise your Passphrase and Digipass pin, do not write them down. Never let anyone else use your Digipass and Passphrase.
• Logging in/out - Always type the URL www.aib.ie/ibb and login from there. Don't click on links within emails as you may be redirected to a fraudulent website.
• Check Session Security- Check the URL make sure it starts with 'https://'
• Beware of Fraudulent Emails / SMS Texts- AIB will never send you emails or SMS texts asking for login or account details.

Report Suspicious Activity

If you suspect any of your details have been compromised or notice suspicious activity on your iBusiness Banking system email alert@aib.ie and contact the iBB team at the following numbers.

AIB: 0818 720 000 or +353 1 641 4899 (08.30 to 17.00 - Mon to Fri)

First Trust: 0870 2430 331 (08.30 to 17.00 - Mon to Fri)

AIB (GB): 0870 2430 331 (08.30 to 17.00 - Mon to Fri)

iBB - What we do to protect you

Two Factor Authentication

iBB provides you with strong online banking security adhering to best practice in the industry. We use Two Factor Authentication procedures to identify all users of iBB, combining Passphrase data known only to the user with a unique Digipass - secure electronic code generator registered to the user. You need both of these items to log in and transact on iBB.

Encryption

iBusiness Banking uses Public Key Infrastructure (PKI) and Digital Signatures as part of User and transaction authentication and also 128-bit Secure Sockets Layer (SSL) to encrypt all information in transit between the customer and AIB.

Constant Monitoring

Other security features include centralised transaction monitoring, and incident management services.

Back to the top

Am I Protected - Checklist for Staying Secure

Your Computers

• Is your Firewall active and up to date? A firewall controls the data that comes into and leaves your computer. Most operating systems (Windows XP, Windows 7,) already have a Firewall built-in - you just need to make sure that the computer you use to access iBB has its firewall activated and updated regularly.
• Do you have Anti-virus Installed? Make sure that you have anti-virus software installed on your PC to protect against Internet threats. Viruses are continually evolving so make sure that you update your anti-virus regularly.
• Have you checked for Malware-spyware recently? These applications run in the background and can track your online interaction and keystrokes. Use anti-spyware software to scan your computers regularly - this will identify and remove any spyware threats.
• Do you update your system regularly? Make sure that your system is up-to-date. Some older Internet browsers (particularly IE 6) are less secure against todays Internet threats. Update your anti-virus software regularly and install security patches for your operating system when they become available.

Local Administrators

iBB customers are responsible for the suitability and integrity of the actions of all their individual users and should ensure that the best practice in online security is followed.

• Have you informed all users of their individual security responsibilities? Make sure that users understand their individual responsibilities for using iBB.
• Have you only given the required level of User Access? Different levels of functionality can be assigned to individual users on iBB. Make sure that you assign only the minimum necessary privileges required for each user to carry out their role. Review these roles regularly.
• Have you segregated key roles? It's a good idea to segregate roles so that no one user can create and authorise a payment on the system. iBB recommends that you assign 2 users to authorise all payments or all payments above a nominated threshold value.
• Do you have a system of dual authorisation? Make sure that no account, utility or user role can be modified without approval of two local administrators.
• Do you review the iBB user access regularly? Put procedures in place to review user access requirements regularly. Make sure you remove access from users that no longer need it or have left the company. Collect redundant Digipasses and return them to: AIB, iBusiness Banking, 1 Adelaide Road, Dublin 2.

iBB Users

All users of iBB have personal security responsibilities that they need to follow:

• Have you protected your Passphrase and Digipass PIN? Make sure you always keep your login details confidential. Do not use the same password that you use for other systems - never share your access details or Digipass with colleagues. Keep your Digipass in a safe place and do not disclose your Digipass PIN to anyone.
• Do you Log in/out correctly? Its best practice to type the website address www.aib.ie/ibb and log in from there. Never click on a link from an email purporting to be from AIB - you may be redirected to a fraudulent website. Don't leave your PC while you are logged in and when you are finished on iBB be sure to use the log-out button rather than just closing the browser window.
• Always check for a Secure Session? Always check that your iBB session is secure when you log in. Look for the https:// rather than http:// at the start of the address bar.
• Are you vigilant regarding Fraudulent Email / SMS texts - Phishing AIB will never send you an email or text you asking to confirm your account details or asking for any other banking details. Fraudulent emails circulate that may look convincing but you should never respond to or click a link in these emails.

Report Suspicious Activity

If you suspect any of your details have been compromised or notice suspicious activity on your iBusiness Banking system email alert@aib.ie and contact the iBB team at the following numbers.

AIB: 0818 720 000 or +353 1 641 4899 (08.30 to 17.00 - Mon to Fri)

First Trust: 0870 2430 331 (08.30 to 17.00 - Mon to Fri)

AIB (GB): 0870 2430 331 (08.30 to 17.00 - Mon to Fri)