Lesson 3 of 6

Protecting access and data: identity, authentication and the customer

To act inside a lender's systems, an attacker needs someone's access: a member of staff's, a partner's or a customer's. This lesson separates identity, authentication and authorisation, explains authentication factors and assurance levels in the NIST digital identity guidelines, shows with a simple formula why limiting guesses matters, and sets out how data are protected and what the FATF says about digital identity for customers.

Published 14 October 2026