Securing Access to Financial Data

Multi-Factor Authentication

The FFIEC recommends against using one form of customer authentication to protect online transactions and accounts. NYDFS Cybersecurity Regulations require MFA to securely connect to internal networks for financial organizations that operate or conduct transactions in New York.

Duo's MFA offers a more secure and easy-to-use method by sending push notifications to users' smartphones via Duo Mobile. Plus, Duo’s other methods support all types of login scenarios, including offline users or those without smartphones.

To meet compliance and pass audits, you need to protect your mix of cloud, older on-premises and custom apps. Duo integrates with more apps regardless of where they reside - protecting hybrid environments, remote access VPNs, single sign-on and more. To support remote employees (insurance agents and financial planners), Duo offers easy self-enrollment and automated enrollment options to ensure successful deployments at scale and reduce help desk tickets.

Device Visibility & Policies

To support insurance agents as contractors using their own personal devices, Duo provides greater device insight without an intrusive agent. Get visibility into all user devices - including corporate or personally-owned laptops, smartphones, desktops and PCs. Detect devices running out-of-date software, and identify endpoints that are jailbroken, rooted, tampered with, unencrypted and more.

Useful for daily, weekly or monthly compliance audits, Duo’s reports give you detailed insight into user and device risks that can easily be expo

Adaptive Authentication

Based on a risk assessment, NYDFS requires that financial institutions use effective controls such as risk-based authentication (also known as adaptive authentication) to protect against unauthorized access to their information systems.

Duo's solution lets you set policies to block access attempts based on an individual or group, geolocation, network type and device security. Enforce stricter login controls for unmanaged, personally-owned devices used by third-party service providers. Require encryption or enabled passcodes, and block access by devices without enabled security controls.