Welcome to BankInfoSecurity's FFIEC Guidance Resource Center!

The latest news, views and education on the Federal Financial Institutions Examination Council's latest guidance on the risks and risk management controls necessary to authenticate services in an Internet banking environment.

APIs Demand Dynamic Security, Not Static Controls

Michael Novinson • December 8, 2025

API security is evolving fast as AI, new architectures and distributed teams reshape how developers build and secure modern systems, says Postman Head of Security Sam Chehab. Secrets management and AI-driven controls now play a pivotal role in keeping data secure at scale.

Thwarting Cyberthreats in the Power Sector

Fraud Management & Cybercrime

Beyond Fraud Prevention: Rebuilding Trust Through Intelligence

Secure AI Tools: From Visibility to Post-Quantum Readiness

How Linking Identity, Data Security Can Help Cyber Response

Latest

Events

How Generative AI Enables Solo Cybercriminals

Anna Delaney • May 2, 2025

While artificial intelligence is a "double edged sword" for both enhancing security and enabling cybercriminals, the defenders are thankfully currently "ahead of the game," said Ray Heffer, field CISO of Veeam. But there's the worrisome threat that the advantage could shift the other way, he said.

Events

Agentic AI Tackles Network Outage Prevention Challenges

Tom Field • May 1, 2025

Agentic AI combined with intent-based automation offers proactive problem-solving within a network infrastructure, said Lingping Gao, CEO and chairman of NetBrain. The solution is not just reacting to outages but understanding and enforcing the underlying "intent" behind every function in a network.

Unlocking Data and AI to Digitally Transform Manufacturing

Cal Harrison • April 30, 2025

Manufacturers want to digitally transform to tap into the latest artificial intelligence tools, but they're saddled with decades-old equipment that was not designed to easily share data with other systems. But there's hope, said James Van Pelt, manufacturing practice lead at Stibo Systems.

Artificial Intelligence & Machine Learning

Why Better Security in AI Use Will Fuel Wider Adoption

Michael Novinson • April 30, 2025

While adoption of artificial intelligence tools and development is soaring, security of these technologies - through model validation and other techniques - will fuel even wider adoption of AI, said DJ Sampath, vice president of AI software and platform at Cisco.

Events

Securing AI Models Against Unpredictability and Exploitation

Michael Novinson • April 29, 2025

AI is transforming cybersecurity from the ground up. Security teams battle skills shortages, alert fatigue and bloated technology stacks. Jeetu Patel, Executive Vice President and Chief Product Officer at Cisco, said AI can augment capacity and simplify defenses when applied thoughtfully.

Events

AI vs. AI: The New Cybersecurity Battlefield

Tom Field • April 29, 2025

Offensive cybersecurity is gaining momentum, driven by frameworks such as Gartner's Continuous Threat Exposure Management and advancements in generative AI. Organizations are increasingly adopting proactive strategies to secure their digital assets, said BreachLock CEO Seemant Sehgal.

Events

The Importance of Quantifying Security Risk for the Board

Michael Novinson • April 29, 2025

Quantifying the potential cost impact of a cyberattack on a critical business operation and demonstrating how to reduce that risk to a more acceptable level is crucial for CISOs gaining cybersecurity budget buy-in from the CFO, board and others, said Sumedh Thakar, president and CEO of Qualys.

Cyberwarfare / Nation-State Attacks

Ukrainian Signal Users Fall to Russian Social Engineering

Akshaya Asokan • February 19, 2025

Russian nation-state hackers are using phishing attacks to target Ukrainian users of the chat app Signal, say security researchers. Rather than circumventing Signal's end-to-end encryption via a cryptographic attack, attackers use malicious prompting to prod victims into exposing messages.

Data Privacy

5 Successful Strategies to Overhaul Your Data Security

Druva • February 13, 2025

IT and security teams spend countless hours and dollars managing and maintaining infrastructure and storage to protect their data. So, what does it take to build stronger data security and resiliency? Watch this webinar to learn how 5 different organizations found a path to better security.

Cloud Security

From Data Security Blind Spots to Recovery: Close Your Cyber Resilience Gaps

Druva • February 13, 2025

Traditional cybersecurity defenses alone won’t cut it anymore. Organizations need a resilient, well-rounded strategy for fast, clean recovery and continuity. Watch now to learn how to enhance data immutability, security, and cyber remediation to reduce business impact.

Data Masking & Information Archiving

Top 10 Technical Predictions for 2025

Druva • February 13, 2025

Join data experts as they talk about their technical predictions for this year and look back on how well they did last year. The discussion will involve hot topics such as data security in the age of AI and AI-driven simplification of product usability

AI-Powered SASE

AI Access: Get Visibility Into What's Being Used and How

Tom Field • February 6, 2025

Visibility into access - it's been the bane of many organizations' efforts to understand where and how generative AI is being used throughout the extended enterprise. Jason Georgi of Palo Alto Networks, shared insights into new strategies and tools that overcome the risks of mismanaged access.