1. Risk & Fraud Management
  2. Access Control

Access control protection for every login, every session

Q2 Patrol's access control detects anomalies and prevents unwanted access to your digital banking.  
Schedule a demo
access-control-1
access-control-2

Q2 Patrol stops digital intruders before they strike

Q2’s proven real-time, risk-based access control solutions are designed to prevent sophisticated cybercriminals from entering your digital banking environment to commit fraud.

Q2 Patrol continuously monitors user behavior and device activity to detect and prevent unauthorized access. Using real-time risk analysis, Patrol helps financial institutions strengthen security, mitigate account takeover (ATO), and enforce adaptive/step-up authentication without disrupting legitimate user experience.  

For greater account holder trust and revenue generation

Knowing their accounts are safe, customers and members will be more interested in building deeper relationships with your institution. 

Gain competitive differentiation

A more complete access control framework wins more account holders. They’ll appreciate your innovative approach to staying ahead of cybercrime. 

Meet compliance

Ensure legal and policy requirements and governance while making reporting and auditing processes more efficient. 

access-control-3

Zero Trust stops intrusions

Zero Trust principles are at work at Q2 to bring more complete security to financial institutions and account holders.

Our distributed cloud approach is protected by a Secure Access Service Edge (SASE), giving Q2’s Integrated Operations Center (IOC) constant threat visibility and mitigation for you and your account holders. 

Q2 continuously verifies a user’s rights

Enforce constant authentication and authorization access to your institution’s systems and network. 

Least-privileged policies in place

Limit user access with just-in-time and just-enough access.

Breaches are prevented

Q2 segments access by network, user, device, and application awareness to avoid breaches. 

Access monitoring with anomaly detection

Monitoring login and behavior patterns with Q2 Patrol allows us to optionally prompt users for step-up authentication before accessing high-risk events when we detect anomalous activity, such as an access request from an unusual location or device.

Access details are continuously tracked, including day and time, state location of IP address, device type (mobile, tablet, desktop), and browser/app. Anomalies found in use patterns trigger Patrol. 

Authentication can occur via Secure Access Code (SAC) or Symantec token (virtual or physical). 

Add users, change alerts, authorize external transfer, and change contact information when needed

You also can access administrative reporting of user logins and device details for reviews.

access-control-4

Even more protection layers

Based on your account holder composition and level of global commerce, you can enable extra protection layers to prevent undesirable login attempts with our OFAC login restriction service. This service can be configured to restrict direct access from countries listed for U.S. Treasury sanctions, or a higher tier that includes additional high-risk countries.

With Q2 Security Insights, your institution gets deeper visibility into the full set of network traffic managed by Q2 to correlate signals from your Q2 stack for your own security assessment purposes. 

access-control-6

  • “CISOs are increasingly acknowledging that it will require more than just raising employee security awareness, if the objective is minimizing cybersecurity risk exposure from eminently avoidable employee actions. Enterprises that are serious about human risk management must go further.”

    Gartner
    4 Ways to Achieve Secure Employees, 2023
    Read story

  • “Remember that the efficacy of zero trust depends on 100% deployment. That means everyone uses multifactor, every bit of data is protected, and every endpoint has anomaly detection. Vulnerability at a single access point can create vulnerability in the entire system.”

    Lou Senko
    Chief Availability Officer, Q2
    Read story

FAQs

How does access control work in banking?

Access control helps financial institutions restrict and manage access to their digital banking environments to protect account holders. Access control can be maintained in a variety of ways, including multifactor authentication, password encryption, security alerts, and biometric login options.  

What is Zero Trust security?

When a financial institution implements a Zero Trust security framework, its assuming no users should be trusted without first requiring them to go through a verification and authorization process each time they request access to sensitive financial information. 

How does access control impact digital engagement?

Account holders may have concerns about the risk level of conducting financial transactions online due to security fears. Providing strict access controls such as a Zero Trust framework can help build confidence by showing these account holders their personal details are not vulnerable to bad actors.   

How does Q2 integrate with a financial institution’s existing IAM or SSO systems?

With open standards like OpenID Connect (OIDC) for user authentication, Q2 allows external identity providers (IdPs) to manage their logins. Our software also leverages its SDKs and our Partner Acceleration Program to embed third-party services, including Amount, MANTL, Entersekt, and others.

This creates a seamless experience for users and financial organizations across different banking functions. Our integrations enable features such as pre-filled applications, centralized user management, and streamlined workflows without constant password entry.  

Resources

All resources
 

Additional products