Defines the minimum security requirements for a secure and protected exchange of information between a user and a financial service provider. The protection offered will provide integrity for a message during transmission; provide secrecy of the message