Blog: Secure Your Self-Service Channel From All Sides

What are the Key Challenges?

Changing Compliance Requirements
The constant flow of new compliance requirements from global, regional, and national standards like PCI-DSS, the Cyber Resilience Act, and others is hard to keep up with, and if you fail an audit, you will likely be sanctioned. Though, this may still be better than the alternative: intentional or accidental fraud resulting in financial and image losses. 

Increased Attacker Organization
While tools like the darknet have been used by attackers for years, for example, to purchase skimming devices, what we are witnessing in some regions is a new level of organization among ATM attackers. Take the strain of explosive attacks in Germany or the ongoing strain of jackpotting attacks in the USA. Law enforcement agencies suspect the cash attackers earn is funneled into further illegal activities like drug trafficking.

New Attack Vectors
Staying secure long term is difficult due to new threats being developed or the migration of attacks into new regions. Finding, figuring out and then countering a new attack vector take time which can lead to great losses. Especially zero-day threats in cyberattacks are difficult to protect against. 

What Steps Can Your Financial Institution Take to Secure Your Self-Service Channel?

As a global partner for self-service hardware, software and service solutions for your ATM and with security experts around the world, Diebold Nixdorf has the unique, all-round capabilities and experience needed to provide threat intelligence regarding trends in different areas of the world. Our global security experts have identified 7 steps, or metaphorically speaking, shields to secure an ATM self-service fleet long-term. Here they are:

• Security Assessments ensure your self-service channel continues to be secure and can expose weak points before they are exploited. This is critical as attack patterns and security technology develop quickly.
• Physical Security protects against attacks that use brute force to get to the cash inside the ATM but also against any attempt to get into the chassis to install fraudulent devices in or on the ATM. Measures range from enforced steel plates to sensors.
• Data Security focusses more on protecting user data both by improving the privacy of the transaction with low-tech steps like visual barriers and mirrors and using high-tech device recognition and jamming technology.
• Cyber Security is growing more relevant as cyberattacks have become more common with the spread of IoT-driven connectivity. Securing the communication between components of the ATM and the host, as well as preventing unauthorized access to devices and information, are effective countermeasures.
• Security Monitoring can ensure a quick reaction to an attack, which can make a decisive difference. Using modern tracking and analysis programs you can closely monitor your self-service fleet to detect possible fraudulent activity in real time.
• Process, Procedures & Compliance are necessary to avoid internal and external fraud – both caused by negligence or malicious intent. Secure and compliant procedures should be implemented throughout an ATM’s lifecycle: The development process, the installation, and the day-to-day operation.<
• Cooperation & Collaboration like information sharing among all players – financial institutions, law enforcement, and ATM manufacturers, software, and service providers – is key to quickly analyze and counteract new security threats. A necessary step to counteract organized crime groups on the side of attackers.

What are the Benefits of a More Secure ATM Fleet?

Improved Brand Image
The saying “Any publicity is good publicity” may be correct in many cases, but you do not want to be in the news due to a security breach or successful attack. Even one case may damage your brand for years – especially since people tend to remember bad experiences better and longer than good ones. In this case, remaining out of the spotlight is the way to go. 

Trust as a Financial Services Provider 
Fintechs keep encroaching on the business of banks and other more traditional FIs. One key asset the latter still holds over the newer competition is the trust that consumers associate with them. However, this trust has been shaken, and you should do everything in your power to limit further stress on the relationship. 

Attractiveness as an Employer
The war for talent has also reached the financial sector, and there are many struggling to fill positions across their organizations. Consider two banks that are both looking for tellers, where would you rather work: At the one that is being targeted by attackers exploiting a weak point in their armor, or the one that has not been attacked because attackers determine the risk to be too high?

Reduction of Financial Losses
Lastly, both failed audits and successful attacks are costly. With the more brutal physical attacks, damage to devices and surrounding structures can quickly reach more than $1million, but even less destructive attacks like skimming cost $100,000 or more. And that is without considering the financial effect of lost business from loss of trust and increased insurance premiums.

Would you like to check how your security infrastructure holds up against threats in your region? 

Schedule a security assessment with our experts