Speculation about the pending update to online authentication guidance has been circulating around water coolers for months now. "A [disclosure] like this could make it more challenging for the regulators," says attorney David Navetta.
"It's interesting to see regulators putting the onus on the financial companies for fraud that occurs after the theft has already happened," says David Navetta, co-chairman of the American Bar Association's Information Security Committee.
This piece summarizes the key elements of the three major releases by the FFIEC related to online authentication: The original 2005 authentication guidance, 2006 FAQs and the 2010 draft supplement.
"We want to know what the FFIEC guidelines actually mean and who is responsible for enforcing audits and compliance," says fraud victim Jim Payne, owner of Choice Escrow.
Malware like ZeuS has rapidly outpaced all other banking security threats, and according to a recent survey by PhoneFactor is regarded as the greatest threat to online banking today. Because malware has evolved to defeat most security measures currently in place, financial institutions must likewise evolve their...
A preliminary draft of new online authentication guidance from the Federal Financial Institutions Examination Council puts greater responsibility on the shoulders of financial institutions to enhance security.
After one of its commercial customers fell victim to an online account takeover, this community bank suffered losses, reputational damage and learned that legal disputes rarely favor the bank.
When deciding whether to invest in an email security solution - and which solution to opt for - businesses need to understand the extent of the costs they risk incurring if they have either no or inadequate protection in place. Symantec.cloud provides industry-leading email security capabilities that enable businesses...
Recovering deleted emails and locating old business records are two of the most cited reasons for needing an easily searchable email archive.
This white paper discusses some of the top challenges businesses can face when deciding to implement an email archiving solution and what to consider before moving forward.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing ffiec.bankinfosecurity.com, you agree to our use of cookies.