Melton Building Society - Migrating Computer Systems

OrangeBlueGreen

Hi everyone

I am aware that Melton BS are changing systems, that online access has been temporarily revoked and that we will need to re-register for their new system.

Last week, they mentioned it would be out of action for a few days and their website said Monday 6th October. This has now been and gone and I now notice there is no longer a date mentioned on their website banner.

Instead of clogging their line, I just wondered if someone may have spoken to them and if they gave an update on what is happening?

Thanks

Kim_13

I also noticed that their website still said they expected to launch on the 6th yesterday, but that there’s no indication given today. In my view those in charge of messaging have got to expect calls to be coming in about it (or branch visits if they are open.) It’s not just a minor inconvenience of not being able to view your accounts when you like but also having been told that you can’t withdraw until they’ve finished.

Strangely, they prompted me to change my password about a week before it went offline - why bother, if everyone will have to re-register rather than to log in with their existing credentials?

MyRealNameToo

Kim_13 said:

Strangely, they prompted me to change my password about a week before it went offline - why bother, if everyone will have to re-register rather than to log in with their existing credentials?

As there could be issues if in that week your account was accessed by an unauthorised person because they had disabled the requirement to change your password every X weeks. Alternatively the requirement to change passwords every X weeks is hard coded into the source code and not a business configuration item and so why invest in changing it, testing it, releasing new code on something being taken down in a weeks time?

Plus where do you draw the line? Stop resets 1 week early? 2 weeks? 1 month? Maybe abandon people changing their password all together?

Haven't had much to do with Cyber Insurance but things like password policies, 2FA etc are probable underwriting criteria and policies wouldnt be valid if policies were changed without the insurer being updated and recalculating premiums. 

Certainly sounds like something has gone notably wrong in the fact they have used up all their contingency and arent confident enough to give a new date but clearly not so badly wrong that they arent rolling back (unless its one of those brown trouser projects where a roll back isnt viable)