InvestorsHub Logo
icon url

WBCTrader

07/03/17 3:19 PM

#171667 RE: anEmptyBottle #171665

FFIEC GUIDANCE IS THE STANDARDS

I am an IT Manager for the Financial sector and have been for 17 years, but don't take my word for it, here is the FFIEC website.

Examination Council's (FFIEC) Web Site.

FFIEC Council

The Council is a formal interagency body empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions by the Board of Governors of the Federal Reserve System (FRB), the Federal Deposit Insurance Corporation (FDIC), the National Credit Union Administration (NCUA), the Office of the Comptroller of the Currency (OCC), and the Consumer Financial Protection Bureau (CFPB),




The FFIEC issues the GUIDANCE STANDARDS then the Governing body enforces those standards with IT Compliance audits, at the FED and state level.


Updated guidance for the Federal Financial Institutions Examination Council (“FFIEC”) regulations include the requirement for solutions that have Two-Factor Out-of-Band Authentication and products that stop keylogging malware, real time, which our management believes our proprietary products uniquely and directly address. This new updated guidance went into effect as of January 1, 2012. Based on this new requirement in the latest FFIEC update that was published in June 2011 with enforcement commencing in January 2012




Thats why I pulled the quote straight from SFOR Fins, because SFOR even acknowledges that the FFIEC sets the standards, and their standards are guidance. That is what was being argued before, now the spin has started. go back and read the posts


It was being stated that "now that oob/mfa will be industry standard SFOR to da moon" or something to that effect. I just pointed out that MFA and oob/mfa have been around for a while, there were many forms of each, and it has been a industry standard MFA since 2001 and oob/mfa since 2012.