Authentication in an Internet Banking Environment Frequently Asked Questions

• On October 12, 2005, the FFIEC issued guidance on Authentication in an Internet Banking Environment (see FDIC FIL-103-2005 ).
• The FFIEC has published the attached FAQs to assist financial institutions and their technology service providers in conforming with the guidance.
• The FAQs are divided into seven areas and include answers to questions concerning:
• the scope of the guidance,
• the time frame for compliance,
• definitions,
• risk assessment,
• customers,
• technology service providers, and
• the appendix.

Distribution:
FDIC-Supervised Banks (Commercial and Savings)

Suggested Routing:
Chief Executive Officer
Chief Information Security Officer

Note:
FDIC financial institution letters (FILs) may be accessed from the FDIC's Web site at www.fdic.gov/news/financial-institution-letters/2006/index.html .

To receive FILs electronically, please visit http://www.fdic.gov/about/subscriptions/fil.html .

Paper copies of FDIC financial institution letters may be obtained through the FDIC's Public Information Center, 3501 Fairfax Drive, E-1002, Arlington VA 22226 (1-877-275-3342 or 703-562-2200).