122 / 499
Prepared for Springfield R-XII School District
40
The website provides participants with immediate confirmation. Most transactions are also
reported via a written confirmation statement within two business days. The hard copy of the
confirmation statement is mailed directly to the participant’s address of record.
c. Describe how confidential information is protected and secured by and within the
system (e.g., PIN, audit trail, confirmations).
Data is secured within VALIC’s system by PINs, passwords, audit trails, and confirmation
statements sent to participants. Participants must use a secure user id and password that
they set to access their account online. If using the Voice Response System (VRS), they
must also use their account number and secure PIN. Any transaction the participant or an
authorized VALIC employee makes is recorded on the system creating a date and time
stamped audit trail directly linked to the user id that conducted the transaction. Confirmation
statements of transactions are key to the overall security picture and are mailed to the
participant’s address of record. Any address changes will trigger both a confirmation at the
old address and in addition one sent to the new address.
To secure the communications between the participant's personal computer and the online
server, VALIC utilizes a security protocol called Secure Sockets Layer (SSL) that provides
communications privacy and authentication over the Internet. When a Web server is
configured for SSL transactions, it can encrypt data that passes between Web clients and
the server.
The benefits of SSL include:
Privacy - Web data is encrypted to and from clients to ensure privacy during
transactions.
Message validation - Encoded messages include data that can be used to detect any
message "tampering" while the message is in transit between the client and the server.
Server authentication - The server's digital signature accompanies messages to assure
the client that the server's identity is authentic.
SSL uses a public/private key technology that requires the server to hold a unique pair of
mathematically related keys, a private key and a public key, to initiate SSL-encrypted
transactions.
d. Describe the level of client customization on your website services.
VALIC will create a Private Label website for your participants. The entire website will be
branded with your logo. You can use it to promote plan benefits, custom marketing
campaign, unique messaging, and more.
e. Are there any limitations on the hours of availability of your website (specify time
zone)? Are there any time limitations on transaction processing through the website?
There are no limitations on the hours of availability of the website. Transactions input prior
to the close of the New York Stock Exchange (NYSE) are processed the same business
day. Transactions input after the close of the NYSE process the following business day.