August 2021
FFIEC Issues Guidance on Authentication and Access to Financial Institution Services and Systems
(Aug. 11, 2021) – The Federal Financial Institutions Examination Council (FFIEC), on behalf of its members, today issued guidance that provides financial institutions with examples of effective authentication and access risk management principles and practices for customers, employees, and third parties accessing digital banking services and information systems.
The guidance:
- Highlights the current cybersecurity threat environment including increased remote access by customers and users, and attacks that leverage compromised credentials; and mentions the risks arising from push payment capabilities.
- Recognizes the importance of the financial institution’s risk assessment to determine appropriate access and authentication practices to determine the wide range of users accessing financial institution systems and services.
- Supports a financial institution’s adoption of layered security and underscores weaknesses in single-factor authentication.
- Discusses how multi-factor authentication or controls of equivalent strength can more effectively mitigate risks.
- Includes examples of authentication controls, and a list of government and industry resources and references to assist financial institutions with authentication and access management.
The new guidance replaces previous documents issued in 2005 and 2011.
Agency | Contact | Phone |
---|---|---|
Agency Federal Reserve |
Contact Chelcee Stearns |
Phone 202.452.5228 |
Agency CFPB |
Contact Mike Robinson |
Phone 202.597.4022 |
Agency FDIC |
Contact LaJuan Williams-Young |
Phone 202.898.3876 |
Agency NCUA |
Contact Ben Hardaway |
Phone 703.518.6333 |
Agency OCC |
Contact Stephanie Collins |
Phone 202.649.6870 |
Agency SLC |
Contact Laura Fisher |
Phone 202.812.9813 |
Latest News
The National Credit Union Administration issued four consent orders and two prohibition notices in…
2 min read
Valwood Park Federal Credit Union of Carrollton, Texas, is once again under the control and…
1 min read
According to the latest Quarterly U.S. Map Review released today by the National Credit Union…
1 min read
The National Credit Union Administration today released its 2024 Annual Report, highlighting the…
1 min read