دانلود رایگان پاورپوینت راهنمای احراز هویت مشتری (انگلیسی)

FFIEC Customer Authentication Guidance: Authentication in an Internet Banking Environment
About the Speaker
]Discussion Topics
Overview of the FFIEC
Evolution of the Guidance
Evolving Cybercrime Landscape
Objectives of the Guidance
Layered Security Approach
Multi-Factor Authentication
Multi-Factor Authentication Examples
Effective Layered Controls
Establishing Effective Layered Controls
Risk Assessments
Recent Court Cases
New FFIEC Working Group

Effective Layered Controls
Multi-Factor Authentication may not be considered a strong enough control by itself for high risk transactions (eg. high dollar wire transactions) or practical to implement (eg. retail web banking customers). As such, implementing additional controls is critical to establishing an effective layered control environment. Examples of layered controls:

fraud detection and monitoring systems that include consideration of customer history and behavior and enable a timely and effective institution response;
the use of dual customer authorization through different access devices;
the use of out of band verification for transactions;
the use of “positive pay,” debit blocks, and other techniques to appropriately limit the transactional use of the account
enhanced controls over account activities; such as transaction value thresholds, payment recipients, number of transactions allowed per day, and allowable payment windows (e.g.,days and times);
internet protocol (IP) reputation based tools to block connection to banking servers from IP addresses known or suspected to be associated with fraudulent activities;
policies and practices for addressing customer devices identified as potentially compromised and customers who may be facilitating fraud;
enhanced control over changes to account maintenance activities performed by customers either online or through customer service channels; and
enhanced customer education to increase awareness of the fraud risk and effective techniques customers can use to mitigate the risk.