Welcome to Better MFA

February 1st, 2008

bettermfa.jpg

►Why Better? 3 good reasons …

  1. No License Fee (as in no cost)
    - for CUISPA members
    - and institutions under $200M in assets
    -
  2. Multiple MFA Workflows you and your users can choose from
    - not a one size fits all solutions
    - BofA style - with unique image and SMS password option
    - HSBC style- with out of band cell phone support
    - eTrade ™ style- with hardware token
    - BetterMFA- offers them all and lets you and your members choose
    - create your own- you have source code!
    -
  3. Source Code is included
    - so you never feel at the mercy of a vendor
    -

► Fact: Most financial institutions are not satisfied with their MFA

In the rush to deploy MFA before the FFIEC suggested deadline in 2006, many financial institutions found themselves rushing into a solution. Now that more than a year has passed, many feel their MFA solutions leave much to be desired. It is not uncommon to hear words like “disaster”, “ugly”, “not worth it”, and “stuck” when discussing MFA these days.

► Fact: MFA can be better. Much Better!

Here is a top 10 8 list of what is wrong with today’s MFA solutions…

  1. ugly - MFA is not winning any design awards, that’s for sure
  2. rigid - most MFAs are my way or the highway, offering little flexibility
  3. one size fits all - not all consumers like the solution you chose
  4. locked in - once it’s deployed your stuck with it
  5. not very secure - lets face it, challenge questions and pictures raise the bar, but not a lot by today’s standards
  6. closed - why always go back to the vendor for every little change
  7. expensive - goes with the territory when you vendors realize there is a deadline
  8. not expensive - some cores “threw it in for free”, and you can tell

► So how is BetterMFA, better?

BetterMFA is the result of a joint effort between Jwaala (best know for their popular MoneyTracker online banking suite) and CUISPA (best known for facilitating Credit Unions collaboration on technology risk managment). Principals at Jwaala and CUISPA were talking security one day and were sharing “nightmare MFA” stories. Soon they both realized that general MFA dissatisfaction was rampant. Trying to think “outside the box”, the BetterMFA solution was created. We feel strongly that BetterMFA …

  • solves the industry dissatisfaction issues
  • unites financial institution security professionals to raise the security bar
  • Provides value and not just pain for consumers

► You be the judge

And now for the top 10 8 list of why BetterMFA is just better

  1. open - source code is available, that’s right, you can customize to your heart’s content
  2. pretty - we think it looks great out of the box, but you have complete control to customize the look and feel.
  3. flexible - comes with 5 authentication workflows, pick what’s right for you
  4. extendable - create your own authentication workflow or ask us to do it for you
  5. community - you’re no longer solely dependent on your vendor
  6. user choice - just like ETrade and BofA, let your users self select into an authentication workflows that’s right for them
  7. free - for CUISPA members and smaller FI’s it really is free (see join for more info)
  8. secure - users can self select into strong authentication workflows, even hardware tokens

► Join! Don’t buy.

We feel that authentication for financial services is too important to operate in a vacuum and is too important to get locked into a one size fits all solution controlled by a vendor striving to turn a profit, so to eliminate this conflict, we have built the BetterMFA solution around a community of peers. By joining the community (free for CUISPA members and smaller FI’s) you will receive…

  • The BetterMFA server
  • Access to the BetterMFA source code
  • Access to the BetterMFA discussion group
  • Access to the BetterMFA documentation and wiki
  • The ability to share any BetterMFA tweaks, workflows, improvements from the community or development group