"Precise identification of the problem forms the first step in the rational decision making approach."
— Bnet.com
"Extended Validation SSL certificates build on the existing SSL certificate format, but provide an additional layer of protection in a strictly defined issuance process created to ensure that the certificate holder is who they claim to be."
— Certification Authority/Brower Forum
CABforum.org
"While some strong authentication vendors still tout the advantages of this or that type of authenticator or form factor, the larger vendors are increasingly differentiating on the range of options offered, as well as price, ease of management, and quality of implementation services and after-sales support."
— "Market Overview: Strong Authentication for Enterprises in 2008"
Forrester Research, Inc.
July 16, 2008
"Capable fraud detection solutions should have real-time capabilities that allow organizations to stop fraud — before it occurs. It should be quick to respond to new attack methods, but do so in a manner that's affordable to deploy, manage and update as the fraud environment evolves."
— Rodney Nelsestuen
Senior Research Director
TowerGroup
"While each technology has its place, using strong authentication and fraud detection together, as part of a comprehensive security solution, is the most effective means of stopping online fraud."
— George Tubin
Senior Research Director
TowerGroup
Needs Analysis Results
Final Analysis: Extended Validation (EV) SSL Certificates
Summary: Based on your input, your organization does not have a pressing need for strong authentication and/or fraud detection. However, you could benefit from using Extended Validation (EV) SSL certificates to build customer confidence in your organization's public-facing Web sites.
EV SSL Certificates — These advanced, standards-based certificates offer the highest level of assurance for Web security, providing your end-users with a green address bar to emphasize that they are indeed on your organization's trusted Web site. The address bar also displays additional information about your company and the certification authority (CA) that issued the SSL certificate. This technology improves customer confidence, as well as encrypts the information used during transactions with your online applications.
To help you select the EV SSL certificate appropriate for you organization, try one of these useful resources.
Needs Analysis Results
Final Analysis: Strong Authentication & EV SSL
Summary: Based on your input, your organization's primary requirement is for a strong authentication solution so you may easily deploy proven authenticators like grid cards, one-time-passcode tokens, SMS capabilities and more. You should also consider using Extended Validation (EV) SSL certificates to build customer confidence in your organization's public-facing Web sites.
Strong Authentication — A versatile authentication platform is the solution of choice for many of today's elite banks and financial institutions. Proven strong authentication platforms offer the full range of authenticators — grid cards or one-time-passcode tokens, for example — and give you the ability to deploy all from a single platform.
The solution should provide strong authentication that's affordable, easy to use and scalable to mass user populations.
EV SSL Certificates — These advanced, standards-based certificates offer the highest level of assurance for Web security, providing your end-users with a green address bar to emphasize that they are indeed on your organization's trusted Web site. The address bar also displays additional information about your company and the certification authority (CA) that issued the SSL certificate. This technology improves customer confidence, as well as encrypts the information used during transactions with your online applications.
To help you select the EV SSL certificate appropriate for you organization, try one of these useful resources.
Needs Analysis Results
Final Analysis: Real-Time Fraud Detection & EV SSL
Summary: Based on your input, your organization's primary need is to implement a real-time fraud detection solution that has been proven in real-world environments. Extended Validation (EV) SSL certificates will also help to build customer confidence in your organization's public-facing Web sites.
Real-Time Fraud Detection — We understand that sorting through technical capabilities can be daunting. In the simplest terms, your organization should find a fraud detection solution that automatically acts in real-time, without constant human intervention, and can identify behaviors anomalies that often signify that fraud is occurring.
Seek a product that will enable rapid response to new types of fraud, which make it affordable to deploy, manage, update and easy to add new applications to the monitoring system.
EV SSL Certificates — These advanced, standards-based certificates offer the highest level of assurance for Web security, providing your end-users with a green address bar to emphasize that they are indeed on your organization's trusted Web site. The address bar also displays additional information about your company and the certification authority (CA) that issued the SSL certificate. This technology improves customer confidence, as well as encrypts the information used during transactions with your online applications.
To help you select the EV SSL certificate appropriate for you organization, try one of these useful resources.
Needs Analysis Results
Final Analysis: Strong Authentication, Fraud Detection & EV SSL
Summary: Based on your input, your organization should implement a comprehensive security solution that leverages strong authentication and fraud detection working together within a single environment. Extended Validation (EV) SSL certificates can also be helpful to build customer confidence in your organization's public-facing Web sites.
Strong Authentication & Fraud Detection — Working together, strong consumer authentication and real-time fraud detection provide a true integrated solution for financial institutions.
Known as risk-based authentication, the real-time fraud detection solution will help to identity online fraud, while it's happening, and then only require your customers to authenticate their identity when the risk of a transaction reaches your establish threshold.
Proven strong authentication platforms offer the full range of authenticators — grid cards or one-time-passcode tokens, for example — and give you the ability to deploy all from a single platform. The fraud detection solution should be able to quickly respond to new types of fraud, making it affordable to deploy, manage, update and easy to add new applications to the monitoring system.
EV SSL Certificates — These advanced, standards-based certificates offer the highest level of assurance for Web security, providing your end-users with a green address bar to emphasize that they are indeed on your organization's trusted Web site. The address bar also displays additional information about your company and the certification authority (CA) that issued the SSL certificate. This technology improves customer confidence, as well as encrypts the information used during transactions with your online applications.
To help you select the EV SSL certificate appropriate for you organization, try one of these useful resources.
Interactive Online Fraud Analysis
To help categorize your organization's security needs, please complete the following eight-question survey by rating the importance of the attributes below. Importance is based on a 1-to-5 scale (1 being of little importance; 5 being of highest importance).