The Federal Financial Institutions Examination Council has just released a clarification FAQ that goes a long way in clearing up confusion over its October 2005 guidance on Internet security, but some questions still linger. Smaller firms remain unsure what regulators expect of them. Many banks, including those with substantial mortgage interests, had complained that the rules were too vague, such as not specifying which firms had to implement the rules...