An Inside Look at the “Updated” FFIEC Guidance on Authentication

Broadcast Live on Wednesday, December 14, 2011 • 2:00 p.m. - 3:30 p.m. EST  

On-Demand Webcast Available until June 14, 2012  

Open to all credit unions, regardless of membership or charter type!

Get a sneak peak at this hot-topic presentation that will be offered during NAFCU’s 2012 Technology and Security Conference, February 14 -16 at the MGM Grand, Las Vegas.

Six years after the FFIEC released FIL-305-2005: Authentication in an Internet Banking Environment, the FFIEC has come out with: Supplemental Guidance on Internet Banking Authentication. The original FIL released in October of 2005 was intended to provide guidance related to stronger authentication for financial activities in an Internet banking environment. Hackers and fraudsters reacted with a collective yawn, and it had almost no impact on their malicious activities. The supplement released in June is intended to provide an update on current risks and guidelines for authenticating members.

During this webcast, you will learn from computer technology expert Randy Romes, CISSP, CRISC, MCP, PCI-QSA, about the evolution of the hacking and fraud environment that drove the need for the original authentication guidance. You’ll also learn about the recently released update and benefit from from case study insight on fraud events including Phishing, ACH Fraud, and HELOC fraud phone calls. Get a powerful glimpse into the evolution of threats, including interactions with members through Internet banking, telephone and e-mail

During the 90 minutes, you’ll benefit from information on:

1. The evolution of threats relating to non face-to-face member communication including internet banking, phone interactions, and e-mail usage and the best way to manage these risks;
2. Changes to the FFIEC Guidance on Internet Banking Authentication;
3. Strategies for stronger, more reasonable member authentication; and
4. The strengths and weaknesses of different authentication procedures; 
  

Industry Leading Speakers#Speakers kers_LiveWebcasts 

Randy Romes, CISSP, CRISC, MCP, PCI-QSA
Principal
LarsonAllen LLP

Mr. Romes has been a consultant at LarsonAllen for twelve years and brings a strong background in computer technology, physics and education. He leads a team of technology and industry specialists providing IT audits and security assessments for clients in a wide range of industries and diverse operating environments. He is responsible for the continuing development of the open-source, Unix, and Windows applications used in all of the security audits, and he leads the firms PCI-QSA audit practice.

He is a Certified Information Systems Security Professional (CISSP), a Certified in Risk and Information System Controls (CRISC) professional, a PCI-Qualified Security Assessor (PCI-QSA), and a Microsoft Certified Professional (MCP) with multiple NT 4.0 certifications.

Credit Union staff that will benefit from this webcast include: #Who_should_attend 

NAFCU's webcasts include live streaming video and audio of the presenters along with presentation slides and downloadable handouts. You can easily submit your questions to the presenters at any time and there is no dialing in over the phone! The audio and video stream directly through your computer.

Registration Fees#Registration_Fees

On-Demand webcasts are available for up to 6 months after the live broadcast and are included in the registration fee.

Broadcast live from NAFCU's Headquarters in Arlington, VA.