J.P. MORGAN CHASE BANK-2016 - Laserfiche WebLink

Home Browse Search

• Separating duties, accounts and approval workflows, the City can help reduce the risk of fraud or compromised data. The City's security administrators are the only individuals able to assign users with transaction initiation privileges. • Limiting each ACCESS Online user to a single, designated computer. • Establishing transaction and daily aggregate limits at the account and user level. • Creating templates with payment details to prevent wires from being initiated and executed without prior approval of the recipient bank account numbers and template details. To help meet client audit controls, J.P. Morgan requires two security administrators to be involved in user setup and maintenance. Additionally, if security administrators are entitled to use product functions, such as cash reporting, wire initiation, etc., two other security administrators must prepare and approve the product function entitlements. Dual control is enforced as follows: • One security administrator establishes users for: • Accounts and services: ACH initiation, wire initiation, balance reporting, etc. • Functions: Transaction initiation, transaction approval, release, reporting, etc. • A different security administrator approves the users for the accounts, services and functions established by the first security administrator To provide a complete audit trail, the system date and time - stamps all actions executed within the portal and associates those to the user who performed them. After three tries to enter the correct password, the system disables /suspends the log -on ID. Users will need to call the help desk and answer questions to confirm their identity, such as ID and date of birth. The help desk will then enable the log- in ID. This can also be reactivated online if the user can successfully answer a previously stored set of challenge questions. ACCESS Online will allow a basic user to attempt to log on three times before disabling that login. If users have payment initiation entitlements and /or a SecurID device, they will be allowed five attempts to log on before disabling. The total count is cumulative per user, not based on dial -in or log -in. When the user does enter the correct password, the count is reset to zero. mm