In 2005, the FFIEC issued a guideline for how businesses should handle authentication in financial environments (credit unions, banks, trading firms, etc). This authentication, or in other terms, the validity of a certain customer to their account/transactions had certain guidelines set by the FFIEC to ensure that other individuals (such as hackers) would not be able to impersonate the customer. Since the guideline was made in 2005, much has changed in the way of online security, and new guidelines were established to make sure that customer information was protected.