Security Notes

What steps are being taken to ensure the privacy and security of my account information?

CIGNA takes safeguarding the privacy and security of your account information very seriously. To that end, CIGNA's Web services have been built following strict security best practices that include:

1. A CIGNA Web service to your company, it is only available to those who are authorized by an employer to use the service.
2. Services are secured behind a firewall with monitoring of unauthorized access attempts. Evidence of inappropriate use is investigated.
3. Your selected password must be between 6 and 12 characters with at least one number and one letter. Passwords must be unique from your name and any prior passwords used.
4. CIGNA's Web Services provide users with capabilities to perform password changes. For the continued protection of your account, we encourage you to use this facility on a periodic basis.
5. CIGNA uses the most secure version of communications available for your protection. Only browsers that support Secure Socket Layer (SSL) and 128-bit encryption (also known as domestic or U.S. grade security) can be used to access these Web services. SSL minimizes the likelihood that third parties will read electronic messages between you and CIGNA, even if intercepted. If you use Microsoft Internet Explorer or Netscape Navigator/Communicator and do not have version 6.0 or higher, you may download the latest version of:
   
   • Internet Explorer
   • Netscape Navigator or Communicator
   • Firefox
6. CIGNA's Web Services have a feature that automatically inactivates your account access after five invalid login attempts. This ensures that unauthorized individuals cannot use your account by successfully guessing your password. Should you forget your password, a password reset tool is available from the login page. You will be prompted to answer security questions originally asked during registration.
7. Built-in timers terminate your access if you are not actively using the site.
8. Your password will never be displayed on Web pages.
9. Any attempt to go to a page that you may have bookmarked will always require you to go through the login process to authenticate yourself.

What steps should I take to help ensure the security of my account information?

You share responsibility for maintaining the security of personal account information when using online services. When you finish using CIGNA's Web Services, you should always use the logout button to leave the service and then close down your browser. Also, you should never share your password with anyone.

What if someone learns my password?

If you suspect that someone knows your password, you can either use the online Forgot Password tool or call CIGNA at 1.800.284.8346 to request that it be changed. Remember, you should never share your password with anyone.

How can I tell if my online session with CIGNA is encrypted?

Netscape browsers have a key icon and Microsoft Internet Explorer uses a padlock to represent an encrypted session. These icons are displayed in the lower right corner of your browser. A broken key or an open lock indicates that the session is not encrypted. (Although a broken key or open lock might appear when the page loads between two encrypted pages, the session is still encrypted if the key or lock is present when the page has finished loading.) Note that if you leave a CIGNA Web Service for any reason, your encrypted session will be interrupted and you will need to log in again when returning.