5 Tips to Help Banks Implement E-Payments Security
1. Risk Assessments
The FFIEC recommends that banks update their risk assessment processes at least every 12 months and factor in changes to the threat environment, customer adoption and any incidents of fraud attacks when making changes to its assessments. But NACHA suggests more frequent reviews and updates.
Some of the environmental changes that NACHA says should trigger additional risk assessments include changes in the customer base that uses electronic transactions and the introduction of new electronic funds transfer services. NACHA also suggests that banks review any attempted security breaches to help determine fraud patterns and correct any problems.