Federal Financial Institutions Examination Council’s online authentication guidance could be issued any day now. Banks are moving forward with enhanced fraud-detection systems and improved online communications. FFIEC has touted layered security and authentication since 2005 as necessities, but what about the security of PII? As the Epsilon breach proves, e-mail addresses can easily be linked to consumer information. “It’s the institution’s reputation and the risk that should be the most concerning,” says Aite Group Analyst Julie McNelley.”]
Source: https://www.cuinfosecurity.com/blogs/waiting-for-ffiec-guidance-p-931