HARRISBURG, Penn. — The missing piece of the security puzzle isn't anything at the credit union-it's making sure the members' computers are equally secure.
That's why PSECU is providing members with free security software that protects banking interactions directly from the member's personal computer, said Tim Snyder, administrator, information security at the $3.4-billion CU.
PSECU is the first CU to announce it would help members secure their banking sessions with an option to download a Web browser plug-in. In doing so, the CU hopes to shore up the weakest link in data security-the member's computer, which could be vulnerable to malicious software. "Malware is a major concern," explained Eric Leighow, director of IT enterprise operations, PSECU. "We want to show our members that we value their information and their transactions by complementing their existing antivirus and firewall software."
The 400 kilobyte plug-in, part of the Trusteer Rapport service, controls all personal information stored in the member's browser at PSECU.com and selected sites, including applications, login credentials and account numbers.
The tool blocks malware and prevents members from being redirected to fraudulent sites-which even high-profile multi-factor authentication platforms don't do. "Rapport forms a tunnel between our site and the member's remote PC to protect transactions," added Snyder. "Rapport is another option for the member-the missing piece." Indeed, the plug-in will help support safe browsing when a member's "anti-virus and anti-malware programs may not be completely up-to-date."
Rapport enables PSECU to log-in to a secure administration site to set the policies that prevent the unauthorized access to members' personal information and activities. Rapport also sends PSECU all alerts gathered from users' desktops, said Mickey Boodaei, Trusteer CEO.
PSECU made Rapport available at its website last month, without fanfare, and had about 100 registered users in less than two weeks, said Leighow.
By controlling access to the information a member shares online, PSECU also hopes to see a reduction in the fraudulent activity that results from stolen data, said Leighow.
Once a member has downloaded Rapport from PSECU, the tool can be used to protect the member's interactions at other websites, as well-although to a lesser degree, said Boodaei.
"The tool has a broad application, which adds to the overall benefit to the member," according to Mike Verotsky, PSECU's eCommerce manager. "I've got it on my machine at home and find myself manually registering any site that requires a username, including my email accounts."
Rapport is easy for the user to install, requires no maintenance on the user's part, and doesn't impede the user's system performance, continued Snyder. "The only real limitation is if the user is trying to install it at their place of employment where policy prevents external downloads. We've decided to direct those users to their local support staff to see if they can get it deployed within the organization."
Seven other CUs have signed on to offer Rapport to members but are not ready to announce the service, according to Trusteer. Rapport is compatible with the Internet Explorer and Firefox browsers, and will soon work with Safari and Chrome, as well, said Boodaei. Mobile browser versions of Rapport will be released early next year, he said.
