{"id":4737,"date":"2012-02-08T21:53:00","date_gmt":"2012-02-08T21:53:00","guid":{"rendered":"https:\/\/evssolutions.com\/ffeic-fraud-prevention-regulations-breakdown\/"},"modified":"2023-04-12T17:59:54","modified_gmt":"2023-04-12T17:59:54","slug":"ffeic-fraud-prevention-regulations-breakdown","status":"publish","type":"post","link":"https:\/\/evssolutions.com\/insights\/ffeic-fraud-prevention-regulations-breakdown\/","title":{"rendered":"FFEIC Fraud Prevention Regulations Breakdown"},"content":{"rendered":"
The warnings have come, the regulations have been issued,
<\/p>\n The first area of improvement is risk assessments. Companies
<\/span><\/p>\n <\/span>Source: FFIEC Online Banking Security
The second improvement is with layered
\nand EVS<\/a>
\nhas given advice on how to pass the first test, but how many institutions
\nunderstand the FFIEC update? As weve discussed in many of our blogs, the newly
\nupdated set of FFIEC
\ncompliance regulations<\/a> can be confusing to understand especially because
\nthey are applied in very different ways varying on the company. In a study
\nconducted by Bank
\nInfo Security<\/a>, they discuss the three main improvements needed to better
\naddress todays online
\nbanking risks<\/a>.<\/p>\n
\nwere free to conduct risk assessment as often or as seldom<\/em> as they felt necessary. This freedom left room for companies
\nto neglect the ever-growing online
\nID theft<\/a> dangers. The new regulations now make it mandatory for companies
\nto conduct a risk assessment at least once a month. In response to this new
\nrequirement, companies have committed to doing more evaluations outside of the new
\nguidelines.<\/p>\n
\nReadiness Study-Guardian Analytics<\/em><\/span><\/p>\n
\nsecurity<\/a>. <\/span>Retail and business
\naccounts are expected to have the ability to detect any suspicious activity
\nupon logging into an account, at the very least. The FFIEC wants additional
\nsecurity for business accounts and hopes that the increased amounts of risk
\nassessments will help detect the need for added layers. ID
\nauthentication<\/a> can help add to these extra layers that the agencies
\nsuggest. The final area of improvement is in Customer\/Member education. <\/span>This is a very important step that many
\ncompanies have over looked in years past. Letting your customers and\/or clients
\nknow the measures youre taking to protect them, can make a significant
\ndifference in fraud
\nprevention efforts<\/a>. The requirements now include explaining your protection
\nmeasures, how the company will contact their customers if there is an issue,
\nhow customers can protect themselves, and how and when it is appropriate to
\ncontact the institution.<\/p>\n