The U.S. Federal Financial Institutions Examination Council released new guidance on risk management principles and practices associated with authentication and access to financial services and systems. The guidelines, last updated in 2011, apply to consumers, employees and third parties accessing digital banking services and information systems. Notably, FFIEC outlined the importance of layered security and weakness of single-factor authentication while providing examples of multifactor practices that can be adopted.