They published at least one document that caught the attention of some people titled "Enhanced Authentication In Online Banking" where they discussed Risk Based Access Control