Back to Blog

Recent Guidance on Authentication

By Finosec

September 16, 2021

Get notified on new insights from Finosec now!

Be the first to know about new Finosec blogs to grow your knowledge of the cybersecurity governance industry today!

The FFIEC has released an update titled “Authentication and Access to Financial Institution Services and Systems.” It ​​replaces two previously released FFIEC issued pieces: “Authentication in an Internet Banking Environment” released in 2005, and the “Supplement to Authentication in an Internet Banking Environment” released in 2011. The guidance has been expanded to include employees, third party vendors, and APIs with increased expectation in regards to controls and risk management. This update is clearly focused on an understanding of the threat landscape, having a current risk assessment, ensuring layered security, and a general increase in authentication implementation. Take a few minutes to watch Finosec President and CEO Zach Duke unpack this information.

Here are some of the key components of this guidance and some first steps on understanding how it can apply to you.  

First, it is important that you have a current inventory of information systems, digital banking services, and customers. Next, you’ll want to identify which customers and users should be classified as high risk, based on transactions and role/responsibility respectively. This high-risk identification, coupled with the inventory, are a great place to start ensuring that you are on track with risk assessment best practices. Finally, these elements will also provide clear direction on how to best implement layered security, which users should have MFA enforced, and more. In short, the risk management construction will trickle down into other areas of authentication implementation. 

If you would like to read this new guidance in its entirety, you can download the PDF by signing up for Finosec Academy. Simply visit https://www.finosec.academy to get signed up and find the PDF along with plenty of other updates surrounding cybersecurity. Don’t hesitate to reach out to Finosec if you have questions or concerns about this guidance! 

Finosec’s User Access reporting directly addresses this guidance! To learn more simply visit https://www.finosec.com/solutions/user-access-reporting.

More from Finosec

The Critical Foundation of Managing Access to Banking Systems

The Critical Foundation of Managing Access to Banking Systems

Managing access to banking systems has become increasingly complex as financial institutions navigate legacy reporting systems, API access, and cloud solutions. These challenges, along with the risks posed by unmanaged systems, emphasize the need for maintaining a...

Why You Need to Know Every System for Every Employee

Why You Need to Know Every System for Every Employee

Are you confident that your bank has clear and thorough visibility to every employee’s physical and digital access to systems? If you’re like most banks we work with, the answer to this question is “no”. There are many challenges that make tracking employee access...

My Epiphany of AI During a Session With My Therapist

My Epiphany of AI During a Session With My Therapist

For over a year now, every Tuesday, the Finosec team has been holding a meeting to discuss how we are leveraging AI personally, at work, and in our platform. These weekly meetings have consistently focused on sharing the impact of AI for each of us personally and the...

Embracing AI: A Quick Start Guide for Community Financial Institutions

Embracing AI: A Quick Start Guide for Community Financial Institutions

Recently, I had the privilege of speaking to a group of bankers at the ICBA Live conference. When I asked who was using AI, only a few hands went up. Then I asked how many had policies forbidding AI usage, and several more hands were raised. This brought us to an interesting realization: those banks were inadvertently in violation of their own policies. AI isn’t new—it’s been enhancing our industry for years, especially in cybersecurity and fraud detection.

Talk To An Expert Now
Talk To An Expert Now 770.268.2765