<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

FFIEC Guidelines

author Ncontracts
1 min read
Nov 13, 2018

FFIEC guidelines are the standards set up by the Federal Financial Institution Examination Council (FFIEC) for banking practices. The FFIEC is an agency with five agency members (the Fed, FDIC, OCC, NCUA and CFPB) who establish uniform principles, standards, and report forms for the federal examination of financial institutions. FFIEC guidelines cover both banking practices  and cybersecurity.

The Bank Secrecy Act/Anti Money Laundering (BSA/AML) Exam Manual sets out guidelines to ensure banks don’t unknowingly become a part of a money laundering scheme or fraudulent activities. These guidelines include limits on transactions. For example, banks must report transactions of over $10,0000 in cash within 24 hours by one customer. The bank must also report suspicious activity, including transactions of $5,000 or more that the bank suspects is related to illegal activities.

Banks must also follow the Know Your Customer rule to ensure that customers are properly identified. The FFIEC guidelines cover what specific information banks need to collect as they carry out customer due diligence. For example, multi-factor authentication can be used to ensure accurate customer identification. Multi-factor authentication requires customers to use two types of authentication to receive bank services. 

With recent global developments, FFIEC guidelines have been developed to increase cybersecurity in financial institutions. The  FFIEC I.T. Examination Manual contains the guidelines relating to the use of information technology in banking. Regulations found in the FFIEC I.T. Examination Manual include rules about: 

  • business continuity planning, development, and acquisition

  • electronic banking

  • information security

  • I.T. audits

  • I.T. management

  • outsourcing technology services

  • retail payment systems

  • supervision of technology service providers

  • wholesale payment systems.

To follow all the many regulations of the FFIEC guidelines, financial institutions use software services for mitigating compliance risk. This software allows them to manage vendors, create business continuity plans, and use technology while staying compliant with FFIEC guidelines.

Banks and credit unions are audited by FFIEC member agency bank examiners. The findings are reported, and banks are expected to correct any problems found.

Learn about vendor management risks and GLBA risk assessment. 

 

Related: What Is A Compliance Management System And Why Your FI Needs One

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Vendor Risk Enterprise Risk Management ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool
Risk & Compliance

Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool

Nov 1, 2016 3 min read
Much Ado About Nothing: Update to the FFIEC Cybersecurity Assessment Tool Barely Worth a Mention
Risk & Compliance

Much Ado About Nothing: Update to the FFIEC Cybersecurity Assessment Tool Barely Worth a Mention

Jun 27, 2017 1 min read
New BCP Guidance from the FFIEC
Risk & Compliance

New BCP Guidance from the FFIEC

Feb 26, 2015 1 min read