Welcome to BankInfoSecurity's FFIEC Guidance Resource Center!

The latest news, views and education on the Federal Financial Institutions Examination Council's latest guidance on the risks and risk management controls necessary to authenticate services in an Internet banking environment.

Full Text of Final Guidance

Proactive Defense Dominates Discussions at ISMG Fraud Summit

Pooja Tikekar • May 27, 2024

Information Security Media Group's Fraud, Security and Risk Management Summit brought together a diverse group of cybersecurity leaders and experts in New York City for a comprehensive day of education and collaboration on payment fraud, identity theft and third-party risk management.

Cyber Insurance

Key Security Challenges and Tooling Approaches for 2024: Survey Results Analysis

CISO Trainings

A Comparative Study on Cyber Risk: Business vs. Security Perspectives: Survey Results Executive Analysis

3rd Party Risk Management

Research Survey Analysis: Securing Your Third-Party Supply Chain in 2024

Latest

Healthcare

Healthcare Edition: Trends in Generative AI Tool Adoption and Security Challenges

Information Security Media Group • January 31, 2024

Experience this captivating interview featuring David Bradley, Vice President of Consulting Services at Clearwater Security, as he provides in-depth analysis on the current state of generative AI trends in the healthcare industry.

Legislation & Litigation

OpenAI and Microsoft Face New York Times Copyright Lawsuit

Rashmi Ramesh • December 29, 2023

The New York Times is suing OpenAI and its chief backer Microsoft for copyright infringement, alleging that OpenAI used without permission "millions" of its copyrighted articles to train the large language models used by ChatGPT and by extension Bing Chat and Copilot.

CISO Trainings

Business Rewards vs. Security Risks of Generative AI: Executive Panel

Information Security Media Group • December 6, 2023

By the numbers, who has implemented GenAI in their organization? Who has a dedicated budget? And who understands the AI regulations for their industry? An expert panel discusses the findings of ISMG's First Annual Generative AI Study: Business Rewards vs. Security Risks.

CISO Trainings

The State of Enterprise Mobile App Security 2023: Results Analysis

Tony Morbin • November 17, 2023

Compromised mobile apps can be an open door to critical enterprise app servers and other back-end systems, and this survey aims to shine a light on a potential hole in most enterprise security walls – exposing potential gaps in CISO awareness.

Cloud Security

Panel Discussion: Cloud Security in Financial Services

Tom Field • November 6, 2023

When it comes to cloud security in financial services, this expert panel agrees: What you don't know can hurt you. Learn of new "security by design" strategies and solutions from Vice President Erika Voss, Ph.D.; Alicja Cade of Google Cloud; and Anthony Belfiore from Wiz.

Artificial Intelligence & Machine Learning

Securing Data in a SaaS World

Tom Field • October 17, 2023

Varonis CEO Yaki Faitelson is fond of saying "You can't unbreach data." In this interview, he discusses generative AI, as well as other technologies and trends and how they impact the ways enterprises view and secure their most critical data.

On Demand | Health Sector and Evolution of Complex Threats & What That Means for your SOC

October 5, 2023

Join us to learn from Cisco about what new, modern and sophisticated threats look like today, and how these complex threats make it harder to succeed at effective threat detection and response

3rd Party Risk Management

Unintended Risks Downloaded into Development

September 26, 2023

Application Security & Online Fraud

The Evolution of Online Fraud in 2023 and Best Practices to Plug the Gaps

Tony Morbin • September 20, 2023

Vice President at Appgate, Mike Lopez, offers his expert analysis on the survey findings and how this year's results were unique to the most current cyber threats.

Advanced SOC Operations / CSOC

On Demand | The time for automation is now: How your attackers are using automation and why you need to get on board

Information Security Media Group • September 4, 2023

Join Cisco experts as they talk about what effective automation looks like, what automation in the world of XDR really means, and why it’s vital for you to start using

Black Hat

CNAPPs Emerge as a Game Changer in Cloud Security

Tom Field • August 29, 2023

Cloud-native application protection platforms are emerging as a game-changing solution to the evolving challenges in cloud security. Mattan Shalev, head of product management at Wiz, outlined the power of CNAPPs in reducing risk and fortifying cloud security.

Governance & Risk Management

Evolving Cybersecurity: Embrace an Infinite Defense Strategy

Tom Field • August 25, 2023

As the threat landscape continues to evolve, defenders need to shift their focus from individual wins to sustained proactive defenses. Resecurity COO Shawn Loveland proposes embracing a strategy of understanding and fighting adversaries in a constantly changing space - with no beginning and no end.