Security information for CIC eLounge

The most important rules of conduct

• Always store the letter with your personal user ID separately from your other eLounge documents.
• Your personal password is secret. Never write it down and never give it to third parties.
• Protect your computer and your mobile device with an anti-virus program and a firewall and regularly update these programs.
• Regularly run updates for your computer, mobile device and browser to ensure that you always use the latest technology.
• Never log in to CIC eLounge by clicking on a link sent to you by e-mail. Only navigate directly or via the CIC homepage to our eLounge page. Always check that the address is correct before you enter your login data.
• Never pass on any information about CIC eLounge or your mobile device to third parties via e-mail or telephone.
• In the event of the loss or theft of your access information, contact the eLounge Hotline immediately to have your access to CIC eLounge blocked.

Web address

Check the address shown in the Internet browser:

• Follow the tips given at https://www.ebas.ch/en/checking-certificates/.
• Never launch CIC eLounge via a link sent by e-mail. Only navigate directly or via the CIC homepage to our eLounge page. Always check that the address is correct before you enter your login data.
• Access to our secure website is only guaranteed if the address starts with https://www.cic.ch. Our website uses an up-to-date encryption procedure. This enables a secure connection to be established and the secure exchange of your confidential data.
• If the address begins with “https”, the connection is encrypted. Depending on the browser used, the entire address line or part of it will be green. A padlock symbol will always appear to indicate a secure SSL connection and Bank CIC (Switzerland) Ltd. will be shown as the certified remote station.
   

Password

Never disclose your password to others:

• We will never ask you (e.g. by e-mail, telephone, in writing etc.) to disclose your password or other confidential data to us.
• Never install software if you are instructed to do so without your initiative by telephone or in writing. Never allow active remote access to your computer.

Change your password regularly:

• Configure a secure password. Avoid obvious names and digits, and passwords that you use elsewhere. Follow the tips given at https://www.ebas.ch/en/4-protecting-online-access/.
• You have to change your initial password when you register. The new password must have at least ten characters, consisting of a combination of numbers, caps and small letters. We strongly recommend also using at least one special character.
• We recommend changing your password regularly. If you are in doubt and suspect that someone could have discovered your password then change it immediately.
• Deactivate input assistance and password storage in your Internet browser.
   

Login/logout

Check your last login:

• Check the date and time of the last login every time you log in. This information is displayed when you log in from the registered mobile device or CIC Digipass that you need for registration.

Unsuccessful login:

• You have three chances to enter the correct password. After the third unsuccessful attempt, your user ID will be temporarily blocked. After the fifth unsuccessful attempt, your user ID will be blocked. Only the eLounge Hotline is authorised to reactivate your user ID and your password or send you a new password.
• For security reasons, the password is only sent by registered mail.

Log out after each use:

• End every eLounge session by clicking on the “Logout” button.

Automatic logout:

• If you forget to end your session by clicking on the “Logout” button, the connection will be automatically suspended after ten minutes of inactivity for your own security.

Temporary internet files:
Your computer stores the websites you have visited in a directory on the hard drive so that they can be displayed more quickly at a later time. However, if you wish to protect your data against unauthorised access then you should block the storage of secured sites or delete the temporary internet files after each use. See also https://www.ebas.ch/en/deleting-browser-history/.

Signing off on transactions

To increase the security of payment transactions, you have to sign off on payments. After a payment is entered in CIC eLounge, the payment details (recipient, currency, amount) are shown in your CIC Digipass or CIC eLounge, depending on the authentication procedure you have selected. Only approve payments if the details match the invoice.

Under “Settings > General settings” in CIC eLounge you can determine whether you wish to sign off payments for all or only for some transactions and from what amount you wish to sign off transactions.
 

Check computer

The security of our website is one of our most important concerns. We strive to offer you the highest level of security. In order to benefit fully from this, you must also make sure that your computer is secure.

Please therefore pay attention to the following:
You will find all the information you need to securely use the eLounge at https://www.ebas.ch. Please pay particular attention to the five steps for safeguarding your IT security at https://www.ebas.ch/en/5-steps-for-your-digital-securtity/.

Please also pay attention to the continuously updated news on the EBAS homepage.
 

Any other questions?

If you have any further questions, please contact our eLounge Hotline by sending an e-mail to elounge@cic.ch or calling us on bank working days from 8 a.m. to 5.30 p.m. at +41 (0)800 630 510.