Dear Customer,

For the sake of your fund security, Industrial Bank would like you to follow the instructions below while operating the online banking:

I. Properly manage your certificate password

• You should also create a password for your documentary digital certificate. The password should preferably be a combination of digits and English letters in both uppercase and lowercase. To enhance the security of your certificate, avoid using your birth date, name, address and any other easily available information as your password.

• Please keep your certificate password in proper custody. Always be alert to any attempt to obtain your certificate and password. Do not disclose your identity document number, account number or password to others.

• If your certificate password has been revealed, cancel your certificate with the bank as possible as possible and obtain a replacement.

II. Check the website address

• Check and make sure that you're accessing our website http://www.cib.com.cn. Do not access our website via a link from another website.

• When making online purchases, please pay via an established, reputable online merchant. When making an online payment, check and make sure that the website address appearing in the browser's address field on the page for entering your card number and password is our website.

III. Make sure your computer system is secure

• Set a Windows access code. If you're using a computer with a Windows XP or higher operating system, activate the firewall that comes with the system and deactivate the remote logon function.

• Download and install the latest operating system and browser security patch on a regular basis.

• Install anti-virus and firewall software and update it regularly.

• If you will not be using your computer for an extended period of time, disconnect it from the Internet or switch it off.

IV. Enhance security awareness

• Use a digital certificate (e.g. CFCA) accredited by national authorities. We recommend that you install your digital certificate in the Usb-key – “Online Shield”. Do not install it on the hard drive of your computer.

• Keep your account number, password and online banking certificate in proper custody. Avoid accessing the online bank in a public place or on a computer other than yours. Under no circumstances will the Industrial Bank requests you to provide your account password or your online banking certificate by e-mail, regular mail, telephone or SMS.

• After exiting the online bank or when leaving your computer unattended temporarily, be sure to unplug the Online Shield and take it with you. Do not leave it on the computer.

• Do not browse other websites when you're accessing the online bank, as malicious codes from other website may snatch information on your computer.

• Check your online banking transaction statements on a regular basis.

VI. Online Banking Security Package (more stars indicate higher security level)