For bank IT security it is clear that security is fallible. When possible, strong multi-factor authentication needs to be employed to mitigate risk.