Content by Tom Field

How to Comply with FFIEC Authentication Guidance

Tom Field  •  July 20, 2011

Former banking regulator William Henley has simple advice for banking institutions wondering how to comply with the new FFIEC authentication guidance update: "Start immediately, develop a plan, and document your progress."

FFIEC Authentication Guidance: How to Prepare for 2012

Tom Field  •  July 15, 2011

Now that the FFIEC Authentication Guidance update has been issued, there is no more important task for banking institutions than to conduct their risk assessments, says Matthew Speare of M&T Bank Corp.

Fraud Fighters Wanted

Tom Field  •  July 5, 2011

Today's top fraud threats recognize no global boundaries, says James Ratley, head of the Association of Certified Fraud Examiners. And they require a stronger global workforce than ever before.

Anti-Fraud: The Examiner's View

Tom Field  •  June 3, 2011

For nearly two years, banks and businesses across the U.S. have been plagued by a wave of corporate account takeover. And while there's no one answer, Texas bank examiner Phillip Hinkle sees ways that institutions can better detect and prevent these crimes.

NCUA's Hyland on Top Fraud Threats

Tom Field  •  June 2, 2011

Payment card fraud. ACH and wire transfers. ATM skimming. And especially insider crimes. These are among today's top information security threats to institutions, says banking regulator Gigi Hyland in an exclusive interview.

Another Day, Another Breach

Tom Field  •  May 18, 2011

Massachusetts, Sony, Michaels, Epsilon. How many more of these incidents can any of us read about before our eyes just roll back in our heads?

Authentication, Cloud & Governance

Tom Field  •  May 11, 2011

When it comes to hot topics, they don't get hotter than authentication, cloud computing and IT governance - all of which I've discussed at length in recent interviews with industry thought-leaders. Let's review some highlights from these conversations.

Authentication Guidance May Be Near

Tom Field  •  April 15, 2011

Gigi Hyland, board member of the National Credit Union Administration, says the latest draft of authentication guidance is awaiting final signoff from just one member agency of the Federal Financial Institutions Examination Council.

Multifactor Authentication Needs Focus

Tom Field  •  March 16, 2011

Current solutions are good at authenticating users, but not the integrity of the transactions, says Rik Ferguson of Trend Micro. "We're not authenticating the right things."

FFIEC Multifactor Authentication: The Vendor's Role

Tom Field  •  March 15, 2011

"Multifactor authentication is perceived by many as being the panacea," says Rik Ferguson of Trend Micro. "[But] the real problem is: We're not authenticating the right things."

Build Upon 3 Pillars of Trust

Tom Field  •  March 15, 2011

The Internet is inherently insecure, and the only way to ensure today's evolving information systems is to build them upon three pillars of trust. This is the premise of Mike Ozburn, Principal at Booz Allen Hamilton, which has just authored a new white paper about these pillars.

BAI Notes: Authentication and ATMs

Tom Field  •  March 10, 2011

Banking/security leaders aren't crazy about banking regulators telling them they could have done a better job detecting ACH fraud, and they're eager for more specific guidance on what to do going forward.

Fraud Awareness Takes Center Stage

Tom Field  •  March 8, 2011

Recent incidents of corporate account takeover have pushed regulators, associations and practitioners to call for greater awareness and more collaboration between commercial customers and banks. But is there an ROI to enhanced awareness?

PCI Compliance: Tips, Tricks & Emerging Technologies

Presented by Andre Bakken , Anton Chuvakin , Tom Field  •  March 2, 2011

Version 2.0 of the Payment Card Industry Data Security Standard is in effect, and already thought-leaders are reviewing emerging technologies and payment card security trends with an eye toward how they may impact PCI's future. Meanwhile, the single biggest question on the minds of merchants, processors and service...

3 Key Security Stories

Tom Field  •  March 1, 2011

As March roars in, here are three key stories you should be paying attention to across all of our industry sectors.