Security Statement

The Callaway Bank is proud to offer Callaway Bank OnLine and Business Banking OnLine to our customers. With Banking OnLine you can access your accounts, make transfers, and pay bills online. We have endeavored to provide a secure product by employing a firewall system, 128-bit SSL encryption, Access ID and Passwords, and multifactor authentication using PassMark and Vasco Tokens. Each of these components acts as a layer of protection to safeguard sensitive data from unauthorized access.

Firewall
Encryption
Access ID and Password
MultiFactor Authentication

Firewall
Callaway Bank and Business Banking OnLine are protected by a firewall which is set up to reject unauthorized traffic. Requests must filter through the firewall before they are permitted to reach the server, reemphasizing the importance of your Access ID and Password combination, PassMark security and Vasco Tokens which are the only legitimate entry to the program. In addition, we monitor activity on our system at all times to detect unauthorized activity or intrusion attempts, and will take appropriate preventative steps should any unauthorized activity be detected.

Encryption
Once you click on the link to Banking OnLine you enter a secure environment. Our system employs the Secure Socket Layer (SSL) protocol to provide 128-bit encryption of data traveling between the user and our system. You must have a browser that supports 128-bit encryption in order to use Callaway Bank and Business Banking OnLine. We recommend Microsoft's Internet Explorer version 4.0 or higher or Netscape Navigator 4.0 or higher, with 128-bit encryption enabled for Callaway Bank OnLine. We recommend Internet Explorer 5.5 (or greater) with Service Pack 2 from Microsoft Corporation and a screen resolution of 800 x 600 (or greater) pixels, with 128-bit encryption enabled for Business Banking OnLine.

Access ID and Password
When you enroll in Callaway Bank or Business Banking OnLine, we issue an Access ID and Password, which you change the first time you log in. You will be required to change your Password every 6 months, however, you can change your password as often as you wish. The Access ID must be between 6 and 12 characters long, and the Password must be between 8 and 12 characters long with at least 4 numbers. Both the Access ID and Password are case-sensitive. We employ the "3 strikes and you're out" lockout mechanism to deter unauthorized access. After three unsuccessful password attempts, the system locks the Access ID, requiring a call to the bank (573-642-3322) to verify identify before entry to the system is allowed again.

While a firewall system and encryption serve to minimize the possibility of unauthorized access, it remains imperative that you safeguard your password and token for your own protection. You are responsible for the safekeeping of your password. You agree not to disclose the Access ID, Password, secret image and pass phrase to anyone. If you use a token, you agree not to disclose the token’s PIN or let anyone else use your token. A separate Access ID and Password are kept for each individual on an account, so there is no need to share your Access ID and Password with another signer. Please keep your password secure, and change the password if you ever suspect your password has been compromised. You may change your password at any time and as often as you like.