Welcome to BankInfoSecurity's FFIEC Guidance Resource Center!

The latest news, views and education on the Federal Financial Institutions Examination Council's latest guidance on the risks and risk management controls necessary to authenticate services in an Internet banking environment.

Full Text of Final Guidance

Michael Covington of Wandera and John Harrington Jr. of IBM Security

Proactive Mobile Threat Defense

Information Security Media Group • July 17, 2019

From malware and phishing to cryptojacking and man-in-the-middle attacks, mobile threats are rampant, and organizations need to stay a step ahead. Traditional threat management has been reactive. But IBM and Wandera have joined forces to stop threats dead in their tracks before they get close to your environment.

Security Operations

How Gates Corporation Modernized Their Legacy IAM System

Latest

Breach Notification

Identity as a Game-Changing Breach Defense

Information Security Media Group • June 25, 2019

Often in breach response, security professionals focus on the technical aspects of the attack. Yet, the non-technical aspects are often more insidious, says Teju Shyamsundar of Okta. And Identity can be a powerful tool to bolster defenses.

Governance

Zscaler's Global CISO Stan Lowe on Security as a Catalyst for Digital Transformation

Nick Holland • June 27, 2019

In one of the recent stops in this roundtable dinner seriers, ISMG and Zscaler visited Boston to discuss the role of security as a catalyst for digital transformations. We saw in each of these conversations that change is difficult, but that everyone is asking the same questions, says Stan Lowe, Global CISO with...

Application Security

OnDemand Webinar | How to Secure Custom Apps Without Code

Information Security Media Group • June 26, 2019

The number one gating factor for true edge compute on mobile is security, and that's a hard thing to get into a mobile app.

Governance

CISO Sam Massiello on Gates Corporation's IAM Modernization Journey

Ping Identity • June 24, 2019

Gates Corporation CISO Sam Masiello on how they brought their vision of a global authentication authority to life with advisory, configuration, deployment, and employee training.

Fraud Management & Cybercrime

OnDemand Webinar | Asset Management: The Toyota Camry of Cyber Security

Information Security Media Group • June 19, 2019

Security teams' jobs continue to get exceedingly difficult, but they're still spending time trying to figure out where things are and what they are.

Critical Infrastructure Security

Are You APT-Ready? The Role of Breach and Attack Simulation

Mathew J. Schwartz • June 18, 2019

With the volume of data breaches and cyberattacks continuing to rise, organizations are increasingly relying on breach and attack simulation tools to provide more consistent and automated validation of controls, says Cymulate's Tim Ager.

Next-Generation Technologies & Secure Development

The Vision for Omnichannel Authentication

Information Security Media Group • May 30, 2019

Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions.