Well, the ATM Americans with Disabilities Act (ADA) Compliance deadline has come and gone but have you performed your risk assessment for ADA ATM requirements? The FFIEC is clear about the need to conduct risk assessments focused on the deployment of new technologies. What new controls should we have in place due to the new features of our newer ATMs?
This document is an asset-based drill-down risk assessment that can be used to establish inherent and residual risk on vulnerabilities to ATMs whether they are simply ADA-compliant “dumb ATMs” or the new “smart ATMs.”
This document also includes a handy asset inventory to help your team become more familiar with the various components of your new ATMs. Finally, this risk assessment will help you prioritize the development and installation of technical and non-technical controls.
The ATM Risk Assessment:
Not only is this an excellent risk assessment for ATMs ADA compliance and requirements, but this template also makes a great format for use in any new product risk analysis. The assessment brainstorms vulnerabilities to ATMs and guides you through controls that could be implemented to address those vulnerabilities.
In addition to an asset inventory questionnaire, it includes vulnerability assessments with inherent, residual, and anticipated residual risk metrics.