FFIEC Guidelines – Update Imminent?
Gartner’s Avivah Litan posted last week that there have been recent discussions about the FFIEC guidelines that were most recently updated in 2005. According to Avivah’s blog, additional updates to these guidelines are “imminent”.
From the fraud prevention side, we’ve seen that criminals have been able to subvert authentication mechanisms at financial institutions for at least a couple of years now. I hope that the guidelines give banks some clarity on the fact that predictive analytics of website sessions (i.e., looking at the behavior of website sessions) is critical to staunch the current e-crime epidemic.
No matter what, it’s going to be interesting to see what comes from this update.
No comments yet.
Leave a Reply
-
Archives
- February 2012 (5)
- January 2012 (4)
- December 2011 (7)
- November 2011 (8)
- October 2011 (9)
- September 2011 (5)
- August 2011 (7)
- July 2011 (7)
- June 2011 (6)
- May 2011 (4)
- April 2011 (6)
- March 2011 (5)
-
Categories
- behavior analysis
- business logic abuse
- Business Logic Flaw
- Business Process Abuse
- Compliance
- Cost of fraud
- Data Loss
- Detection
- education
- Fraud
- Gaming
- General
- information security
- Investigation
- Man-in-the-Browser
- Online Fraud
- Payment
- Phishing
- predictive analytics
- Prevention
- risk management
- Social engineering
- Social Networks
- Trust
- Uncategorized
- web logic abuse
- Zeus
-
RSS
Entries RSS
Comments RSS

