Welcome to BankInfoSecurity's FFIEC Guidance Resource Center!

The latest news, views and education on the Federal Financial Institutions Examination Council's latest guidance on the risks and risk management controls necessary to authenticate services in an Internet banking environment.

Full Text of Final Guidance

Office 365 Threat Simulation

Okta • May 16, 2019

Threat actors tend to target Office 365 as one of the primary methods of account compromise.

Application Security

The Vision for Omnichannel Authentication

Latest

Next-Generation Technologies & Secure Development

Inside Netscout's Threat Report

Tom Field • March 25, 2019

Netscout is out with its latest threat report, and the research offers some startling new insights into DDoS, advanced threats and the commercialization of cybercrime. Hardik Modi offers analysis.

Cybersecurity

API-Centric Automated Attacks on the Rise

Varun Haran • March 25, 2019

CloudEntity CEO Nathaniel Coffing shares insight on building foundational API security in a zero-trust world.

Cybersecurity

CrowdStrike's 2019 Global Threat Report

Tom Field • March 25, 2019

CrowdStrike is out with its 2019 Global Threat Report, which includes a ranking of the most dangerous nation-state adversaries. The company's CTO, Dmitri Alperovitch, discusses the report's key findings about threats and threat actors.

Authentication

Gaining Visibility and Control Over Passwords

Nick Holland • March 25, 2019

Passwords are still a persistent security threat, given their ubiquity as a form of authentication and the inability of users to create strong, unique passwords. John Bennet of LogMeIn discusses the issue and solutions.

Cybersecurity

Threat Watch: Phishing, Social Engineering Continue

Mathew J. Schwartz • March 25, 2019

Reviewing 2018 attacks, Jon Clay of Trend Micro, says social engineering persists, including phishing attacks, while criminals also continue to steal credentials, lob ransomware at targets and push cryptomining malware.

Application Security

Application Security and the Focus on Software Integrity

Tom Field • March 25, 2019

As trends such as DevSecOps and agile application development spread, enterprises increasingly are focused on software integrity. Andreas Kuehlmann of Synopsys discusses how to address this shift.

Cybersecurity

3 Hot Legal Topics at RSA Conference 2019

Mathew J. Schwartz • March 25, 2019

What's hot on the cybersecurity legal front? For starters, in 2018, the U.S. Department of Justice indicted twice as many alleged state-sponsored attackers than it had ever indicted, says Kimberly Peretti of Alston & Bird.

Next-Generation Technologies & Secure Development

Assessing the Cyber Threat Landscape

Tom Field • May 2, 2019

The 2018 cybersecurity landscape ushered in a blend of old and new threats, some of them game-changing, according to Trend Micro's Annual Security Roundup. Trend's Greg Young shares insight from this report.

Business Email Compromise (BEC)

Enhancing Office 365 to Securely Manage and Share Sensitive Information

Information Security Media Group • April 24, 2019

Email is still the fundamental driver for Office 365 and the biggest risk to data security and compliance.

Artificial Intelligence & Machine Learning

Cryptolocker Motivates City of Westland, MI to Change Security Strategy

Daniel Bourdeau • April 16, 2019

Watch this brief video interview to learn more about how the city of Westland achieved their security goals by harnessing AI to gain the most real-time visibility into their environment.

Endpoint Protection Platforms (EPP)

Why Companies are Replacing AV with Advanced Endpoint Protection

Information Security Media Group • April 12, 2019

Learn how next-generation AV in the cloud solves a variety of common problems legacy AV users face.

Network & Perimeter

Network Security Strategies for 2019

Information Security Media Group • March 22, 2019

OT, IoT and systems targeted by cryptominers - those are among the main network security concerns of Greg Young, VP of cybersecurity at Trend Micro. Which technology trends should security leaders follow to improve network security? Young shares his insight.