Security and access control

HSBCnet security

HSBCnet offers a reliable and secure online environment by adopting best-in- class technologies, proven best practice IT policies and procedures and the dedication of expert resources. We employ industry-standard solutions to authenticate your identity when you log on to ensure that your data is transmitted securely and reliably and that the customer data we hold is protected. We have backup and contingency plans to ensure interruptions to the service, for whatever reason, are minimised.

Drawing on our considerable experience as providers of secure electronic banking systems, we also operate a control and support structure designed to ensure that we address all aspects of the risks faced in providing transactional banking online.

Key features

• Robust authentication processes
• Two-factor authentication using one-time-password generating Security Devices or Smart Cards, ensuring identification integrity and mitigating key-logging and denial-of-service risks on user credentials
• Encrypted sessions between customer and the Bank (SSL v3 128 bit)
• Protection of sensitive information in transit and storage to ensure confidentiality of customer data
• Industry-standard security mechanisms to protect the infrastructure
• Regular independent reviews of system security
• Robust and regularly reviewed information security policies covering systems and installation development and management
• Comprehensive contingency and backup arrangements
• 24/7 security monitoring and centralized incident management team
• Audit trails for administrative and transactional activities

Please note: the one-time-password Security Device is currently available in a limited number of countries. Contact your Bank representative to confirm which security solution is available to you locally.

Access control

Most importantly, HSBCnet puts you in control of your internal security with flexible administration tools to make your online experience efficient and secure. Whether your organisation is large or small, you have the opportunity to tailor the system to align with your corporate, compliance and audit needs.

At the heart of HSBCnet are the actions of your designated System Administrators, who determine what each staff member is allowed to see and do on HSBCnet. From payment clerks to senior accountants, your System Administrators decide who receives specific functionality. By managing access to tools and report options, you can streamline internal processes and improve your operational efficiency.

Adding new users to HSBCnet is easy. System Administrators provide them with a quick step-by-step registration process. Going forward, HSBCnet features flexible options for adding new users, including copying specific access entitlements from existing users.

You can also access information on who is using the system, at what time and for what activity. These details are time and date stamped to help simplify your audit process.