Vendors' Guide to the FFIEC Authentication Guidance

Presented by ISMG 90 Minutes

For banking institutions, the release of the 2011 FFIEC Authentication Guidance is a game-changer, handing down new standards for layered security controls, risk assessments, authentication techniques and customer awareness. But what does all this mean to technology vendors and third-party service providers? Attend this session to understand new demands on banking institutions, as well as expert insight on:

Key tenets of the new guidance and how they may impact banking institutions' technology investments;
The unique security/risk management challenges facing institutions of all sizes;
Differences between security controls for commercial and consumer accounts;
What banking/security leaders need to do to prepare for 2012 regulatory exams.

The entire FFIEC Guidance series:

Background

The Federal Financial Institutions Examination Council has formally released the long-awaited supplement to its "Authentication in an Internet Banking Environment" guidance, which was first issued by the FFIEC in October 2005. Formal assessments for compliance with the new guidance will begin in January 2012.

The purpose of the supplement is to reinforce the risk-management framework described in the original guidance and update the FFIEC member agencies' supervisory expectations regarding customer authentication, layered security, and other controls in the increasingly hostile online environment.

The official supplement highlights the need for:

Better risk assessments;
Effective strategies for mitigating known online risks;
Improved customer and employee fraud awareness.

In this exclusive session, Philip Alexander, information security officer at a major U.S. financial institution will discuss exactly what technology vendors need to know about the FFIEC guidance and how it impacts their banking customers. Among the topics he will discuss:

Risk assessments and layered security - what they mean to banking institutions in the context of the guidance;
Strategies for protecting online banking customers - commercial and consumer;
Emerging challenges such as mobile banking;
How you can help your banking customers prepare for 2012 regulatory exams.