ACH and RDC Risk Assessments


As technology and payments products evolve; so do fraud schemes, operational challenges, and regulatory requirements. Because of this ever-changing payments landscape, it is critical that financial institutions understand their risks and build a management program to control them. PAR/WACHA is here to help your financial institution comply with the FFIEC Guidance by conducting and maintaining your payments risk assessments.

ACH Risk Assessment

PAR/WACHA will perform a comprehensive ACH risk assessment that will help safeguard your financial institution from potential loss. During the assessment, your ACH staff will receive custom education and solutions to ensure you have sufficient controls in place. Once the assessment is complete, you will receive a detailed report of the assessed risks with recommendations for mitigating controls. The report will be presented in an easy-to-read electronic matrix that allows for you to add your execution strategy and completion date before presenting it to your Compliance Committee and/or Board of Directors.

Areas covered in your ACH Risk Assessment include:

  • Strategic Risk – Board and Management Oversight
  • Operational Risk – Training, ACH Receipt, Government Payments, ACH Origination
  • Credit Risk
  • Regulation E, OFAC, BSA/AML
  • Business Continuity
  • Cross Channel Payments Risk
  • Other areas: ACH Audit, Third Party Senders, Direct Access, High-Risk Activities

Remote Deposit Capture (RDC) Risk Assessment

Unlike ACH with the NACHA Operating Rules, there are not any set rules for Remote Deposit Capture. There are; however, Remote Deposit Capture risk management standards provided by the FFIEC Guidance. The guidance calls for financial institutions to evaluate their risk to determine their own Remote Deposit Capture provisions, which can sometimes be even more challenging. It can be hard for financial institutions to stay up-to-date with RDC guidelines and impending risks.

Let PAR/WACHA perform your RDC Risk Assessment, and help provide your financial institution with a safeguard against potential loss. During the assessment, your RDC staff will receive custom education and solutions to ensure you have sufficient controls in place. After the assessment, you will receive a detailed easy-to-read electronic report showing the assessed risks, recommendations for mitigating controls, and a section for your execution strategy.

 Areas covered in your RDC Risk Assessment include:

  • Strategic Risk – Board and Management Oversight
  • Legal and Compliance Risk – Contracts, OFAC, BSA/AML
  • Operational Risk – Policies and Procedures, Data Security
  • Credit Risk – Deposit Limits and Review
  • Business Continuity
  • Other Areas: Vender Due Diligence, High-Risk Activity, Cross Channel Payments Risk

For more information on PAR’s Compliance Services, contact us at the PAR office at (262) 345-1245, toll-free at (800) 453-1843, or email us at compliance@wacha.org