--- title: The Evolution of Authentication description: Cloud-based technology and remote work have accelerated the evolution of authentication. Usernames and passwords are simply not enough. Financial institutions should assess all systems and implement multi-factor authentication (MFA) anywhere risk lies. image: https://insights.bankonitusa.com/hubfs/Blog/boi-pattern.jpg --- Sales: [405-653-1920](tel:4056531920) 24/7/365 Support: [1-800-498-8877](tel:18004988877) [Client Portal](https://portal.bankonitusa.com/) [![BankOnITUSA](https://insights.bankonitusa.com/hubfs/BOI-Logo-SVG.svg "BankOnITUSA")](https://www.bankonitusa.com/) - [About](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) - [Solutions](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Acheive Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) - [Client Stories](https://www.bankonitusa.com/client-stories/) - [Saint Louis Bank](https://www.bankonitusa.com/client-stories/saint-louis-bank/) - [Commercial National Bank of Texarkana](https://www.bankonitusa.com/client-stories/commercial-national-bank-of-texarkana/) - [Watermark Bank](https://www.bankonitusa.com/client-stories/watermark-bank/) - [Integrity Bank & Trust](https://www.bankonitusa.com/client-stories/integrity-bank-and-trust/) - [Valliance Bank](https://www.bankonitusa.com/client-stories/valliance-bank/) - [First National Bank of Oklahoma](https://www.bankonitusa.com/client-stories/first-national-bank-of-oklahoma/) - [Lisle Savings Bank](https://www.bankonitusa.com/client-stories/lisle-savings-bank/) - [Bank of Prairie Villiage](https://www.bankonitusa.com/client-stories/bank-of-prairie-village/) - [Insights](https://insights.bankonitusa.com/) - [Billion $ Playbook](https://www.bankonitusa.com/billion-playbook/) - [Careers](https://www.bankonitusa.com/careers/) [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) Nov 10, 2025 # [Information Security Brief - November 2025](https://insights.bankonitusa.com/information-security-brief-november-2025) This Email is Making Me FEEL Something Scammers manipulate your emotions! IS AN EMAIL, TEXT, OR DM MAKING YOU FEEL SUDDEN, URGENT EMOTIONS? “You won o... [Read More](https://insights.bankonitusa.com/information-security-brief-november-2025) - - - - [mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fthe-evolution-of-authentication](mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fthe-evolution-of-authentication) [← Return to Blog](https://insights.bankonitusa.com) 16 Sep, 2021 ## The Evolution of Authentication ### Prompt implementation of multi-factor across all access points is a must. #### Summary Cloud-based technology and remote work have accelerated the evolution of authentication. Usernames and passwords are simply not enough. Financial institutions should assess all systems and implement multi-factor authentication (MFA) anywhere risk lies. What is MFA? -- Accessing information with a combination of what you have, know, or are. The Federal Financial Institutions Examination council (FFIEC) recently issued guidance for effective risk-management practices and principles for access and authentication. The new guidance acknowledges the significant risks and threats in today’s cybersecurity landscape and reinforces the need for financial institutions to better authenticate users (customers, employees and third parties) to protect information systems, accounts, and data. Multifactor authentication is one of the single best tools available to protect against ransomware, corporate account takeover (CATO) and business email compromise (BEC). #### Actions for Your Financial Institution Online information systems are under constant attack from sophisticated networks of cybercriminals, many of which are backed by other nation states. To protect your customers and their personal information—and ensure the safety and soundness of your institution — we recommend following the guidance released. Here are 5 steps you can take to get started quickly: 1. **Perform a thorough risk assessment on your systems**. Identify potential entry points for malignant ransomware, particularly those used externally by customers logging into online banking, employees working remotely and in the office, and third-party vendors that have access to your network. 2. **Restrict access to only those who need it.** 3. **Ensure multi-factor authentication is in place for all users.** This can include multiple logins or activation codes sent via app, cell phone, tablet, or another secondary electronic device. 4. **Communicate to your employees and customers.** These extra precautions are to protect customer information, money, and account access as well as the security of the financial institution. The added protections provided far outweigh the few additional seconds taken during the sign-in process. 5. **Document the risk assessment and each subsequent step taken to ensure security.** Examiners and regulators will want to see this documentation—to them, if it isn’t written down, it isn’t real—and they’ll also want to ensure that it has been approved at the board level. They want cybersecurity managed around the boardroom table like any other potential risk. #### BankOnIT and MFA BankOnIT implemented multi-factor authentication on our internal network well before this regulatory release. BankOnIT’s systems and processes have been specifically designed to meet the needs of financial institutions with inclusion of infrastructure and security controls being engineered into the systems we provide our bank network. Such controls are addressed in the internal and external audit process, as well as FFIEC TSP exams. BankOnIT performs critical activities (such as firewall management & monitoring, patch management, hosting & backups, service & support) with our own 24/7 USA based staff in data centers we own. Our use of third-party vendors is intentionally limited to reduce security risks. We understand that banking is based on trust—trust customers have that their bank will keep confidential information secure and their money accessible. [← Return to Blog](https://insights.bankonitusa.com) ##### Disclaimer This publication attempts to provide timely and accurate information concerning the subjects discussed. It is furnished with the understanding that it does not provide legal or other professional services. If legal or other expert assistance is required, the services of a qualified professional should be obtained. ### Search ### Subscribe Here! You'll receive our latest updates in your inbox. ### Posts by Tag - [Cybersecurity (52)](https://insights.bankonitusa.com/tag/cybersecurity) - [Reduce Risk (49)](https://insights.bankonitusa.com/tag/reduce-risk) - [Information Security Brief (36)](https://insights.bankonitusa.com/tag/information-security-brief) - [Information Technology for Banking Leaders (15)](https://insights.bankonitusa.com/tag/information-technology-for-banking-leaders) - [Achieve Operational Efficiency (13)](https://insights.bankonitusa.com/tag/achieve-operational-efficiency) - [Strategy (11)](https://insights.bankonitusa.com/tag/strategy) - [CEO Update (9)](https://insights.bankonitusa.com/tag/ceo-update) - [Gain Competitive Advantage (9)](https://insights.bankonitusa.com/tag/gain-competitive-advantage) - [Regulation (5)](https://insights.bankonitusa.com/tag/regulation) - [Information Security Bulletin (2)](https://insights.bankonitusa.com/tag/information-security-bulletin) - [Regulatory Bulletin (2)](https://insights.bankonitusa.com/tag/regulatory-bulletin) - [Press Release (1)](https://insights.bankonitusa.com/tag/press-release) See all ### Popular Posts #### [CEO Update - Q3 2025](https://insights.bankonitusa.com/ceo-update-q3-2025) #### [CEO Update - Q4 2025](https://insights.bankonitusa.com/ceo-update-q4-2025) #### [Information Security Brief - December 2024](https://insights.bankonitusa.com/information-security-brief-december-24) #### [Information Security Brief - July 2025](https://insights.bankonitusa.com/information-security-brief-july-2025) ## Submit your comment Upon completion you will be automatically redirected to the electronic Authorized Resellers Agreement. ## Related Posts Ready to do MORE with BankOnIT? [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) **Receive BankOnIT Insights.** Get timely information on cybersecurity, regulation, and other trends impacting your bank. #### About - [Overview](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) #### Solutions - [Overview](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Achieve Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) #### Contact - [Support: 1-800-498-8877](tel:18004988877) - [Sales: 405-653-1920](tel:4056531920) #### Social - [Follow Us On LinkedIn](https://www.linkedin.com/company/bankonitusa/) ![BOI-Logo-PNG](https://insights.bankonitusa.com/hubfs/BOI-Logo-PNG.png "BOI-Logo-PNG") © 2023 BankOnITUSA, LLC.[Privacy](https://www.bankonitusa.com/privacy-policy/)