{"id":4754,"date":"2014-09-15T16:09:38","date_gmt":"2014-09-15T16:09:38","guid":{"rendered":"https:\/\/evssolutions.com\/new-ffiec-guidelines-time-to-layer\/"},"modified":"2014-09-15T16:09:38","modified_gmt":"2014-09-15T16:09:38","slug":"new-ffiec-guidelines-time-to-layer","status":"publish","type":"post","link":"https:\/\/evssolutions.com\/insights\/new-ffiec-guidelines-time-to-layer\/","title":{"rendered":"New FFIEC Guidelines  Time to Layer"},"content":{"rendered":"<p>The <a href=\"http:\/\/www.ffiec.gov\/\" title=\"FFIEC\">FFIEC<\/a> just released<br \/>\na new set of supplemental guidelines for security measures to thwart identity<br \/>\nthieves in the financial industry. The focus seems to be on risk assessments and<br \/>\ncustomer awareness, as well as layered <a href=\"https:\/\/www.electronicverificationsystems.com\/solutions\/\" title=\"id authentication\">id authentication<\/a><br \/>\ntechniques designed to distinguish customers. Many of the layering techniques<br \/>\nsuggested are commonly used today such as device tracking (cookies),<br \/>\nout-of-band verification (text to cell phone), limited transactions per day, IP<br \/>\nblocking, challenge questions and various others. The guidance also urges<br \/>\ninstitutions to have a plan in place to detect and respond to malicious<br \/>\nactivity based on the layering techniques.<\/p>\n<p>Once again Challenge Questions are falling out of favor<br \/>\nwith the FFIEC as an effective security layer.<br \/>\nWith traditional challenge questions, used everywhere today, they would<br \/>\nbe correct. The two methods today are defined questions (mothers maiden name,<br \/>\nfirst pets name, etc.) and user defined questions (write your question and your<br \/>\nanswer). Weve been so conditioned with defined questions I would venture to<br \/>\nsay that many people recycle the old questions. Two problems exist with these<br \/>\nquestions: 1) theyre the same for<br \/>\nalmost every website on the Internet, and 2) the information is readily<br \/>\navailable online. <\/p>\n<p>Contrast traditional challenge questions with Out-of-Wallet,<br \/>\n<a href=\"https:\/\/www.electronicverificationsystems.com\/products\/knowledge-based-authentication.aspx\" title=\"KnowledgeBased Authentication\">KnowledgeBased Authentication<\/a> (KBA) questions. Questions not defined by the user,<br \/>\nbut using information that only the user would know from their past are useful<br \/>\nand cost effective tools for a layered approach. <a href=\"https:\/\/www.electronicverificationsystems.com\/\" title=\"EVS\">EVS<\/a> provides KBA<br \/>\nquestions as part of our <a href=\"https:\/\/www.electronicverificationsystems.com\/solutions\/identifraud\/\" title=\"IdentiFraudConsumer\">IdentiFraudConsumer<\/a> product at no additional charge.\n<\/p>\n<p>&nbsp;<\/p>\n<p>[Contributed by Jeff Davis, President and CEO]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The FFIEC just released a new set of supplemental guidelines for security measures to thwart identity thieves in the financial industry. The focus seems to be on risk assessments and customer awareness, as well as layered id authentication techniques designed<\/p>\n","protected":false},"author":40,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4754","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"_links":{"self":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/comments?post=4754"}],"version-history":[{"count":0,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4754\/revisions"}],"wp:attachment":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/media?parent=4754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/categories?post=4754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/tags?post=4754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}