New FFIEC Guidance
“Supplement to Authentication in an
Internet Banking Environment”
Effective January 1, 2012

WEBINAR OR ON-DEMAND WEB LINK
(LINK INCLUDES FREE CD ROM)


Thursday, September 22, 2011

12:00 pm - 1:30 pm Pacific
1:00 pm - 2:30 pm Mountain
2:00 pm - 3:30 pm Central
3:00 pm - 4:30 pm Eastern

Meet the Presenter

Dr. Kevin Streff,
Secure Banking Solutions

CLICK HERE TO LEARN MORE ABOUT YOUR REGISTRATION OPTIONS

The FFIEC recently released the highly-anticipated guidance titled “Supplement to Authentication in an Internet Banking Environment.”  It supplements the FFIEC’s 2005 authentication guidance, reinforces that financial institutions must have a risk management framework, and provides the federal agencies’ expectations for 2011 and beyond.  The FFIEC agencies have directed examiners to assess financial institutions under the Supplement’s enhanced expectations beginning January 1, 2012, so you need to prepare now for these dramatic changes.

Continued growth of electronic banking and increased threat diversity in the digital environment have resulted in higher risks for financial institutions and consumers.  The Supplement clarifies regulatory expectations regarding risk assessments, accountholder authentication, layered security controls, and member awareness/education programs.  There is also an expectation that financial institutions should implement layered security appropriate for these transactions, including the capability to identify and respond to suspicious or anomalous transactions.  Commercial account fraud is a large issue and the Supplement addresses the related expectations, too. 

HIGHLIGHTS092211cu.jpg

  • Review of the 2005 guidance “Authentication in an Internet Banking Environment”
  • Detailed analysis of the 2011 guidance “Supplement to Authentication in an Internet Banking Environment”
  • How the Supplement impacts your commercial account fraud program
  • What the Supplement means for your financial institution, your information security program, and your next examination

WHO SHOULD ATTEND?

This informative session is designed for operations managers, risk officers, compliance officers, IT personnel, information security officers, auditors, IT committee members, and the board of directors.