IMPORTANT NOTES ON PROTECTION YOUR DEPOT

Block access to your computer when you leave your workplace temporarily by setting up a screensaver with password protection. Always turn off your computer when you are not using it.

Avoid accessing your account from public computers, which may be tampered with by hackers and keystroke detection software. If using a public computer is unavoidable, please keep the following points in mind:

• Use the virtual keyboard on the login screen to avoid having your keystrokes recorded.
• Log out completely after using your account.
• Do not let the computer out of your sight while you are logged in.
• Clear the browser cache after you log out so that no sensitive data remains stored on the computer.

Do not share files with third parties unless absolutely necessary. It is best to disable the Windows file and printer sharing feature. If you still want to use this feature, make sure you set up access permissions with strong passwords and allow sharing only with specific users.

We recommend that you enable your pop-up blocker and set the highest possible filter level. Then either add the IB website to your list of trusted websites or disable the pop-up blocker when you use the IB website.

Check regularly if new updates and patches are available for your operating system and use the latest version of your browser.

Use email in a safe way and delete all messages that do not come from a trusted sender, as these messages may contain malicious attachments or the senders may try to fraudulently obtain sensitive information from you. Disable the preview feature in your email system because this feature already makes it possible for certain viruses to run even if you never open the email.

Use the maximum number of characters available and avoid simple or repetitive strings of letters and numbers or passwords that contain personal information.

• Do not share your password with anyone else.
• Change your password at regular intervals and avoid using the same password for multiple systems.
• Do not leave notes with passwords or password aids on your monitor, keyboard, or desk.
• Do not enable application features that automatically log you into systems or auto-populate input fields for usernames and passwords.

Use/install security tools as described below:

You should set up both a hardware and software Internet firewall on your computer to control your computer's incoming/outgoing traffic. This is of particular importance if you maintain a broadband connection and accordingly have a permanent Internet connection.

Use antivirus software to identify and remove viruses that you may have unintentionally downloaded onto your computer. Since new viruses are developed all the time, it is important that you update your antivirus software regularly.

Use anti-spyware software to identify malicious spyware programs that collect various personal data, track your browsing activities and interfere with your computer's control.

Check your account balance and positions regularly via TWS, as well as the daily custody account statements available via Account Management. Report any anomalies immediately to our customer service.

If we detect any anomalies or suspicious activity in relation to your securities account, the most important thing is that we can reach you. Therefore, you should make sure that your stored contact data is always up to date (e.g. telephone numbers and e-mail address). If you would like to update your personal data, please log into the account management and follow the menu path User Management > User Information

This is software that is unintentionally downloaded onto your device when you visit certain websites. Spyware covertly collects data from your computer without your knowledge. Once installed, the spyware tracks the user's activity on the Internet and transmits this information (for example, usernames and passwords) to an unauthorized recipient. You should install anti-spyware software on your computer to identify and remove spyware that may be present.

Phishing describes attempts by criminals to impersonate a trusted entity in order to obtain sensitive data. Phishing attacks typically occur via email and contain a link to an apparently legitimate website. On these fake websites, you are asked to enter personal information, which the criminal operators then use to log into your accounts. Please note that you will never receive an email from IB asking you to divulge sensitive information, such as passwords or your Social Security number. If you receive a suspicious email from a sender claiming to be IB, please do not reply to it, but immediately contact our security team by phone, toll-free in the U.S. at (877) 442-2757 or by direct dial at 001 312 542-6901.

These malicious programs can severely and possibly irreparably damage your hardware, software or files. In some cases, these programs allow unauthorized people to access your system and possibly compromise confidential data. Programs of this type spread and multiply in different ways. The best way to control them is to keep your operating system up-to-date and install antivirus software. Remember to regularly download updates for the antivirus software, so you'll always have the latest bug fixes and function improvements.