In our recent IT exam the examiner suggested that we address the security and protection of our Fedline tokens. He really couldn't make a recommendation to how to address it. He said it was up to us. How do other banks address this?

We just handled this question today. Both our state examiners and the Feds handouts won't tell you what to do only that you have to document what you do. We have decided to have 2 individuals take their tokens with them from the Ebanking area and 1 of the admins as well. All others are locked in a secure area overnight. This way if the building blows up we will have the access we need by the 3 having them with them.

Our FDIC exam is coming up shortly so we'll see if it passes. They did want a copy of our token management policy ready when they arrive.

Thank you. That's a good idea. We just finished our FDIC exam and did really well. They just wanted us to add our token policy to our wire policy. They said they couldn't really tell us what to do.