Regulations and compliance resources and information - SearchFinancialSecurity.com

  • Big 4 (Final 4)

    The Big 4, also known as the Final 4, are the four largest international accounting and professional services firms.

  • Dodd-Frank Act

    The Dodd-Frank Act (fully known as the Dodd-Frank Wall Street Reform and Consumer Protection Act) is a federal law that places regulation of the fi...

  • international financial reporting standards (IFRS)

    International financial reporting standards (IFRS) are specific organizational and monetary standards and frameworks for financial reporting that h...

  • Federal Information Security Management Act (FISMA)

    The Federal Information Security Management Act (FISMA) defines a comprehensive framework to protect government information, operations, and assets...

Regulations and compliance

Premium Access

Register now for unlimited access to our premium content across our network of over 70 information Technology web sites.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

  • How privacy and data security legislation will fare after Nov. 2

    The midterm elections will likely result in a shift in political power. How will that impact pending privacy and data security bills?Article | 28 Oct 2010

  • FTC again delays Red Flags Rule enforcement deadline

    Fifth extension comes at the request of members of Congress who are considering limiting the scope of businesses covered by the law.Article | 28 May 2010

  • Red Flags Rule (RFR)

    The Red Flags Rule (RFR) is a set of United States federal regulations that require certain businesses and organizations to develop and implement documented plans to protect consumers from identity theft.Definition

  • FTC announces fourth Red Flags Rule extension

    Members of Congress asked FTC to delay enforcement of identity-theft regulation for organizations the FTC governsArticle | 02 Nov 2009

  • Identity Theft Assistance Center marks five years of helping victims

    The Identity Theft Assistance Center (ITAC), a nonprofit cooperative of financial-services companies, is celebrating its fifth anniversary with a reception in Washington, D.C. on Wednesday. ITAC has helped 60,000 of its 38 member companies' customers recover from identity theft. SearchFinancialSecurity.com recently met with ITAC President Anne Wallace to discuss ITAC's work, identity theft investigations, and the Red Flags Rule.Interview | 14 Sep 2009

  • Red Flags Rule and preparing for new regulations

    Financial institutions face tough compliance requirements in the Red Flags Rule and the new Massachusetts data protection law. In this video, Richard Mackey discusses how companies can create an effective compliance framework.Video

  • Federal Trade Commission announces third Red Flags Rule extension

    Extension gives state-chartered credit unions and other FTC-governed entities more time to develop an identity theft prevention program.Article | 30 Jul 2009

  • Regulatory reform will require much work ahead

    Financial security pros will need to step it up in light of President Obama's plan to overhaul the financial regulatory system, David Schneier writes.News | 22 Jun 2009

  • Red Flags Rule compliance

    Learn about Red Flags Rule compliance from John Carlson, senior vice president of regulatory affairs for BITS, a division of the Financial Services Roundtable. Carlson offers insight on common compliance pitfalls and the state of compliance in the financial services industry.Video

  • FTC extends Red Flags Rule deadline

    Extension gives non-banking creditors and state-chartered credit unions more time to develop an identity theft prevention program.Article | 01 May 2009

  • VIEW MORE ON : FACTA law requirements

  • Financial Crimes Enforcement Network (FinCEN)

    Financial Crimes Enforcement Network (FinCEN) is a bureau of the United States Department of the Treasury. FinCEN was established in 1990 to safeguard financial systems from abuse by promoting transparency in the U.S. and international financial systems.Definition

  • Suspicious Activity Report (SAR)

    A Suspicious Activity Report (SAR) is a document that financial institutions must file with the Financial Crimes Enforcement Network (FinCEN) following a suspected incident of money laundering or fraud.Definition

  • New FFIEC exam procedures for remote deposit capture risks

    Learn how to prepare for new exam procedures on managing remote deposit capture risks that are included in the updated FFIEC IT examination handbook for retail payment systems.Tip

  • Aite Group: Take action now to manage remote deposit capture risks

    Fraud losses involving RDC technology have the potential to skyrocket if banks don't work proactively to deal with the risks, research firm says.Article | 11 May 2010

  • Regulators revisit authentication advice to thwart online banking fraud

    t's been nearly five years since the Federal Financial Institutions Examination Council (FFIEC) issued its authentication guidance for online banking. Since then, cybercriminals have developed sophisticated malware that can circumvent multifactor authentication to hijack and loot online bank accounts. In the wake of the online banking fraud surge, which has targeted small and midsize businesses, federal regulators are revisiting their 2005 authentication guidance. SearchFinancialSecurity.com met with Jeffrey Kopchik, a senior policy analyst at the FDIC, to learn more about the effort.Interview | 25 Mar 2010

  • Gartner's Avivah Litan on the online banking fraud surge

    The recent surge in online banking fraud and unauthorized Automated Clearing House (ACH) transfers has led to an astounding $100 million in attempted losses from small and midsize businesses so far this year, according to the FBI. SearchFinancialSecurity.com recently met with Avivah Litan, a vice president and distinguished analyst at Gartner Inc., to get her thoughts on the alarming trend and some insight into how banks can protect their customers' accounts. Litan is an expert in financial fraud, authentication, identity theft, and fraud detection and prevention technology.Interview | 30 Nov 2009

  • Multifactor authentication options to secure online banking

    Banks are required to deploy multifactor authentication to secure online banking and meet FFIEC requirements. In this tip, Dave Shackleford describes some of the pros and cons associated with traditional forms of multifactor authentication as well as the benefits and drawbacks of newer systems.Tip

  • Bank Secrecy Act (BSA)

    The Bank Secrecy Act (BSA), also known as the Currency and Foreign Transactions Reporting Act, is legislation passed by the United States Congress in 1970 that requires U.S. financial institutions to collaborate with the U.S. government in cases of suspected money laundering and fraud.Definition

  • FTC Red Flags Rules: How to create an identity theft prevention plan

    Under FTC's Red Flags Rules, all financial institutions and creditors with covered accounts are required to create an identity theft prevention plan. But who is a creditor and what is a covered account? Learn more in this expert tip.Tip

  • Five mistakes banks make in pandemic planning

    Experts cite five areas where financial institutions could improve their planning for a potential H1N1 outbreakArticle | 13 Oct 2009

  • VIEW MORE ON : FFIEC compliance guidelines

  • international financial reporting standards (IFRS)

    International financial reporting standards (IFRS) are specific organizational and monetary standards and frameworks for financial reporting that have been adopted in 113 countries including India, Australia and the European Union.Definition

  • Generally Accepted Recordkeeping Principles (GARP)

    Generally Accepted Recordkeeping Principles (GARP) is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements.Definition

  • Standardization key to Credit Suisse information security governance framework

    The CISO of financial giant Credit Suisse says the key to successful global security and risk management is a uniform governance system supported by a common policy framework.Article | 17 Sep 2010

  • Red Flags Rule (RFR)

    The Red Flags Rule (RFR) is a set of United States federal regulations that require certain businesses and organizations to develop and implement documented plans to protect consumers from identity theft.Definition

  • How to manage security risks in vendor contracts

    Financial institutions face numerous regulatory requirements for managing vendor risk. Learn what financial firms need to include in their vendor contracts in order to conform with regulatory guidance and industry best practices for vendor risk management.Learning Guide

  • Vendor risk management: process and documentation

    As part of the vendor risk management process, regulators expect information security officers will document vendor relationships and have proper vendor documentation.Tip

  • Controls monitoring helps with governance, risk and compliance

    Gartner says continuous controls monitoring for transactions is a GRC technology that promises to reduce compliance costs and improve financial governance.Article | 21 May 2009

  • An advancement in GRC

    David Schneier says he found a product that takes governance, risk, and compliance (GRC) to a new level.News | 14 May 2009

  • Advocacy group looks to foster trust in foreign service providers

    A formal agreement with two Indian technology organizations expands the reach of the BITS program, with the goal of fostering trust in the security controls of international service providers.Article | 23 Apr 2009

  • Using an information security council

    Getting cross-discipline cooperation for company-wide, security related policies is a challenge many financial firms face. Expert Eric Holmquist suggests creating an information security council to overcome this problem. In this tip, learn what attributes the council should have.Tip

  • VIEW MORE ON : Risk frameworks, metrics and strategy

  • Keeping up with state data protection laws

    In addition to regulatory requirements and industry standards, financial institutions need to comply with applicable state data protection laws. In this podcast, legal expert Andrew Baer discusses new requirements in Massachusetts, Nevada and California, and offers advice for managing changing data protection rules. He also addresses the potential for a national data breach notification law.Podcasts

  • Massachusetts data protection law has mixed impact on financials

    Many financial institutions are already meeting new law's requirements for protecting state residents' personal information, but some have work to do.Article | 13 Aug 2009

  • Download presentations from Financial Information Security Decisions 2009

    Download a number of the compelling presentations from the 2009 Financial Information Security Decisions conference.Conference supplement

  • Understanding the impact of new state data protection laws

    States have passed new regulations to boost data security, requiring financial-services firms and other companies to encrypt data at rest, in transit and even on portable devices like laptops. In this tip, Robert Mullins explains the impact of the new laws and how a financial industry expert believes they will add an additional costly auditing burden to an industry that's already heavily regulated.Tip

  • Data breaches jumped in 2008, ITRC report finds

    The financial-services industry is better at security than others, but it still sees an uptick in breach reports, according to a new study.Article | 07 Jan 2009

  • Complying with breach notification laws

    Learn the general requirements of breach notification laws modeled after the California Security Breach Information Act and strategies for compliance.Tip

  • Opinion: Government misses its chance to protect data

    The unending stream of corporate and government data breaches shows no signs of slowing, and News Director Dennis Fisher writes that lawmakers and government officals are missing their chance to fill the breach.Article | 17 Jan 2008

  • Data breach law could put financial burden on retailers

    Legislation being considered in Massachusetts would shift the financial burden associated with a data breach onto retailers. It would be the first of its kind in the United States.Article | 17 Jan 2008

  • Governor rejects data security law

    California Gov. Arnold Schwarzenegger rejected a bill that would have placed more liability on businesses in that state to protect credit card data.Article | 17 Jan 2008

  • Flurry of state disclosure laws creates confusion for CISOs

    Now that nearly three dozen states have enacted breach disclosure laws, national companies face the challenge of reconciling a vast array of guidelines and their implications.Article | 17 Jan 2008