NACHA, the electronics payments association, has launched a resource to support financial institutions in complying with online authentication guidance from the US Federal Financial Institutions Examination Council (FFIEC) in its ‘Supplement to Authentication in an Internet Banking Environment’.
The guidance identifies sound business practices that financial institutions could use to create internal policies and procedures in response, including the completion of periodic risk assessments, establishing layered security controls and educating customers on various forms of potential fraud.
The FFIEC’s supplement was issued last June as an update to its original 2005 publication ‘Authentication in an Internet Banking Environment Guidance’, which provided a risk management framework for financial institutions offering internet-based products and services. The supplement aimed to reinforce the risk management framework described in the original guidance and update the FFIEC member agencies’ supervisory expectations for customer authentication, layered security, and other controls in the online environment.
“A year after issuance of the FFIEC supplement, many financial institutions are still looking for greater clarity around elements of the guidance and, as a result, are still working to fully implement the requirements,” said Tina Giorgio, senior vice president (SVP), Sandy Spring Bank, and a member of NACHA’s risk management advisory group. “Clear understanding is critical to improving online banking security per the requirements outlined in the supplement.”
NACHA’s ‘Sound Business Practices for Implementing Provisions of the Supplement’ provides financial institutions with a clear framework to implement the provisions of the FFIEC Supplement. It includes a side-by-side representation of its key points and the parties affected, any applicable requirement per the NACHA operating rules, and sound business practices to adhere to the points outlined in the supplement.
The US money market fund reforms came into effect in 2016 and are already dramatically shaping US fund industry with investors flooding out of prime funds and into government securities. While the reforms are similar, they are not the same. GTNews interviews Yeng Bulter, global head of the cash business at State Street Global Advisors on the differences.
As the May 25 deadline for Europe’s General Data Protection Regulation (GDPR) inches closer, many treasurers are being lumped with the task of ensuring their wider company is compliant.
APIs may be a solution to MT940 challenges, says Karen Fagan, treasury operation manager, for British television company, ITV.
The top five sectors Asian fintech investors are interested in are data analytics, blockchain, lending, payments and regtech, according to Gary Hwa, EY regional managing partner.