Resources
Business Security

It is highly recommended to dedicate one computer for doing your online banking activities and not use that same computer for email and general Internet surfing.  Also, the following tips will help reduce the risk of malicious software getting onto your systems.

• Make sure the software running on your computers is up to date and supported. Never use software that is no longer supported as it can be much more vulnerable to security weaknesses.
• Ensure you use and keep current on anti-virus software to help identify malicious software that may get installed on your computer.
• Make sure you use and keep a current firewall to protect your computer and network. This could be a separate firewall device or the software firewall that comes with many computer operating systems.
• Disable admin accounts on all computers if possible; at the very least change the default passwords.
• If you have more than one employee using your computers make sure each employee has their own unique and separate user account.
• Ensure everyone uses strong passwords.
• If you use a wireless network (wi-fi) make sure you have secured it as much as possible.
• Use URL and Email filtering to lessen the chance of going to malicious sites.

Make sure that all employees receive education about Internet and  computer use and how they can protect your company and themselves.  Share with all employees the security information Minnwest provides.

Below are some good general security resources that you can use to help build your own computer security program and also provide helpful information to your employees.

• Cybersecurity for Small Business 

Online banking is a very flexible way for you to complete banking transactions on your schedule.  It also provides a great way for you to detect fraud early.  By regularly monitoring your accounts online you can quickly identify fraudulent transactions.

• Change the passwords for your online banking and email accounts at a maximum of every 90 days.
• If you suspect your password to any online account (email, bank, Amazon) was compromised, change it immediately on that system as well as your other online accounts.
• Use a separate, dedicated computer for online banking, one that is never used to access email, instant messaging, social media sites, or to browse the Internet.

Minnwest provides several tools that can help you make your online banking even more secure.

• We monitor all transactions for anomalous behavior and will notify you if we see something suspicious.
• We offer Positive Pay as a means to detect fraudulent checks and ACH debits.
• We provide Security Tokens (Physical and Soft) for an extra level of security to make money movement transactions.

Email is the most prominent means of communication in use today.  Email is also the most prominent means for malicious users to try and gain access to our information.  The most common attack is the use of “phishing” emails; emails that are designed to take advantage of our helpful, trusting and curious nature.

• Be wary of emails from people or companies you do not know and are not expecting.
• Be cautious of clicking on any links or opening any attachments.
• No business or bank should ever ask you to provide user credentials or personal information in response to an email.
• Keep business and personal email separate; on separate computers if possible.
• Visit the Federal Trade Commission's website for additional resources and guidance on email best practices to protect yourself and your business.

You probably use a number of personal identification numbers (PINs), passwords, and passphrases every day: from getting money from the ATM or using your debit card in a store, to logging in to your email or into an online retailer. Keeping track of all of the number, letter, and word combinations may be frustrating at times, but you’ve seen enough news coverage to know that hackers represent a real threat to your information. Often, an attack is not specifically about your account, but about using the access to your information to launch a larger attack.

One of the best ways to protect information or physical property is to ensure that only authorized people have access to it. Verifying that those requesting access are the people they claim to be is the next step. This authentication process is more important and more difficult in the cyber world. Passwords are the most common means of authentication, but only work if they are complex and confidential. Many systems and services have been successfully breached because of insecure and inadequate passwords. Once a system is compromised, it’s open to exploitation by other unwanted sources

How to choose good passwords

Avoid common mistakes

Most people use passwords that are based on personal information and are easy to remember. However, that also makes it easier for an attacker to crack them. Consider a four-digit PIN. Is yours a combination of the month, day, or year of your birthday? Does it contain your address or phone number? Think about how easy it is to find someone’s birthday or similar information. What about your email password—is it a word that can be found in the dictionary? If so, it may be susceptible to dictionary attacks, which attempt to guess passwords based on common words or phrases.

Although intentionally misspelling a word ("daytt" instead of "date") may offer some protection against dictionary attacks, an even better method is to rely on a series of words and use memory techniques, or mnemonics, to help you remember how to decode it. For example, instead of the password "hoops," use "IlTpbb" for "[I] [l]ike [T]o [p]lay [b]asket[b]all." Using both lowercase and capital letters adds another layer of obscurity. Changing the same example used above to "Il!2pBb." creates a password very different from any dictionary word.

Length and complexity

The National Institute of Standards and Technology (NIST) has developed specific guidelines for strong passwords. According to NIST guidance, you should  consider using the longest password or passphrase permissible (16–64 characters) when you can. For example, "Pattern2baseball#4mYmiemale!" would be a strong password because it has 28 characters. It also includes the upper and lowercase letters, numbers, and special characters. You may need to try different variations of a passphrase—some applications limit the length of passwords, some do not accept spaces or certain special characters. Avoid common phrases, famous quotations, and song lyrics.

For more information on how you can protect your information click here.

Mobile devices

Treat your mobile devices the same way you do a desktop or laptop computer.  These devices allow you the same access to the Internet and can also expose your information if not treated correctly.

• Enable strong password protection.
• Enable an automatic screen lock after a length of inactivity (recommend 1 minute).
• If available, implement anti-malware tools.

One of the most overlooked areas of information security is the protection of physical documents and electronic storage devices (flash drives, external hard drives).  Below are several ideas to help protect your physical information.

• Shred papers that contain company, financial or personal information.
• Wipe the contents from the hard drives of computers versus just using a delete command. Delete leaves the actual data accessible whereas a true wipe disk utility completely removes the data. Do a Google search for Disk Wipe to find a solution that works best for you.
• Wipe the contents from printer and copier hard drives as these contain the data that has passed through them.

Scammers and fraudsters use sophisticated tactics to deceive individuals and gain access to sensitive information - being aware of common scams can help you stay protected.

• Phishing Scams – Fraudsters send fake emails, texts, or calls pretending to be from a trusted source (such as your bank) to invite you to click a suspicious link which will steal your login credentials or personal information.
• Imposter Scams – Scammers pose as government agencies, banks, or even family members in distress to trick you into sending money or sharing sensitive details.
• Card Skimming & Account Takeover – Scammers use hidden devices to steal card information or attempt to gain unauthorized access to your online accounts.
• Fake Check & Money Transfer Scams – Scammers may send counterfeit checks or request wire transfers, urging quick action before the fraud is detected.

Be cautious of unsolicited communications, verify requests directly with the company the inquiry is (supposedly) sent from, and avoid clicking suspicious links.

If you suspect that your identity has been stolen, acting quickly can minimize the damage and prevent further misuse of your information.

• Report to the FTC – File a report at IdentityTheft.gov to receive a personalized recovery plan.
• Contact Your Bank & Credit Card Issuers – Notify your financial institutions immediately to freeze or close affected accounts.
• Place a Fraud Alert on Your Credit Report – Contact one of the three major credit bureaus (Experian, Equifax, TransUnion) to add an alert to your file.
• File a Police Report (If Necessary) – If identity theft involves stolen property or financial loss, a police report may help in the recovery process.

Taking immediate steps after falling victim to a scam can help limit the impact of fraud on your finances and credit.

• Secure Your Accounts – Change passwords for compromised accounts, enable multi-factor authentication, and monitor financial transactions closely.
• Dispute Unauthorized Charges – Contact your bank or credit card issuer to report fraudulent transactions and request a chargeback if needed.
• Freeze Your Credit – Consider placing a credit freeze with the three major credit bureaus to prevent new accounts from being opened in your name.
• Monitor Your Credit Reports – Regularly review your credit reports at AnnualCreditReport.com for suspicious activity.
• Stay Alert for Follow-up Scams – Fraud victims are often targeted again, so be wary of calls or emails promising to help you recover lost funds.

For additional guidance, visit the Federal Trade Commission’s Consumer Advice on Identity Theft.

By staying informed and taking proactive measures, you can reduce your risk of fraud and respond effectively if you become a target. If you have any concerns about suspicious activity on your accounts, please contact us immediately.