InvestorsHub Logo
Followers 8
Posts 4298
Boards Moderated 0
Alias Born 04/14/2016

Re: Gold49er post# 158746

Thursday, 04/27/2017 12:53:43 PM

Thursday, April 27, 2017 12:53:43 PM

Post# of 235126
the FFIEC does not get in bed with vendors, so they don't require any specific form of MFA only MFA on "transactions" or "risk activities" that have elevated risk. You can read the guidance.

It can be in the form of "stronger security questions"
OOB authentication

Authentication from a 2nd authorized employee (in the case of business transactions innitiated online)

Software that monitors financial activity and presents MFA on unusual activity.

Bank or financial institution issued "secure usb tokens"

Text verification...

ETC.....