OCC Bulletin 2021-36 Information Security: FFIEC Statement on Authentication and Access to Financial Institution Services and Systems

Publisher

Office of the Comptroller of the Currency

URL

https://www.occ.gov/news-issuances/bulletins/2021/bulletin-2021-36.html

Published

2021-08-11

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

US government work; public domain; public domain

Source notes citing this source

• The FFIEC authentication and access guidance announced August 11, 2021 replaced the 2005 guidance Authentication in an Internet Banking Environment and its 2011 supplement. in context
• The 2021 FFIEC guidance names the risks of call center and IT help desk authentication as an area needing specific controls. in context
• The 2021 FFIEC guidance highlights the weaknesses of single-factor authentication and says multi-factor authentication, or controls of equivalent strength, within layered security can effectively reduce unauthorized access. in context

Cite this source record

APA

WarmTransfer. (2021, August 11). OCC Bulletin 2021-36 Information Security: FFIEC Statement on Authentication and Access to Financial Institution Services and Systems. WarmTransfer. https://warmtransfer.net/knowledge/sources/occ-bulletin-2021-36-ffiec-authentication

BibTeX

@misc{warmtransfer-occ-bulletin-2021-36-ffiec-authentication,
  title  = {OCC Bulletin 2021-36 Information Security: FFIEC Statement on Authentication and Access to Financial Institution Services and Systems},
  author = {{WarmTransfer}},
  year   = {2021},
  url    = {https://warmtransfer.net/knowledge/sources/occ-bulletin-2021-36-ffiec-authentication},
  note   = {Office of the Comptroller of the Currency, accessed 2026-09-30}
}