The authentication guidance specifically addresses the need for risk-based assessment, customer awareness, and security measures to reliably authenticate customers remotely accessing their financial institutions’ Internet-based financial services. The authentication guidance applies to retail and commercial customers. The FAQs are designed to assist financial institutions and their technology service providers in conforming to the guidance by providing information on the scope of the guidance, the time frame for compliance, risk assessments, and other issues.

.....