RBI

RBI warns banks on vulnerability of ATMs running on windows XP or unsupported version of operating system

RBI warns banks on vulnerability of ATMs running on windows XP or unsupported version of operating system and non-implementation of other security measures

Control measures for ATMs – Timeline for compliance

RBI has expressed concerns over the ATMs running on Windows XP and/or other unsupported operating systems.

In a recent communication made to all Scheduled Commercial Banks, Small Finance Banks and Payment Banks and  white-Label ATM Operators, the RBI has expressed displeasure over slow progress on the part of the banks in addressing these issues.

RBI has frawn attention to the vulnerability arising from the ATMs operating on unsupported version of operating system and non-implementation of other security measures which could potentially affect the interests of the banks’ customers adversely, apart from impinging on the image of the bank.

Banks and White-Label ATM Operators have been advised to initiate immediate action in this regard and implement the following control measures as per the prescribed timelines indicated there against:

Sr. No. Control Measures for the ATMs To be completed by
a. Implement security measures such as BIOS password, disabling USB ports, disabling auto-run facility, applying the latest patches of operating system and other softwares, terminal security solution, time-based admin access, etc. August 2018
b. Implement anti-skimming and whitelisting solution. March 2019
c. Upgrade all the ATMs with supported versions of operating system. Such upgrades shall be carried out in a phased manner to ensure that in respect of the existing ATMs running on unsupported versions of operating system,  
i. Not less than 25% of them shall be upgraded by September 2018
ii. Not less than 50% of them shall be upgraded by December 2018
iii. Not less than 75% of them shall be upgraded by March 2019
iv. All of them shall be upgraded by June 2019

Share

Recent Posts

  • Income Tax

Form 26 to replace Form 3CD of tax audit report by a CA from Tax Year 2026-27

Form 26 to replace Form 3CD of tax audit report from Tax Year 2026-27 Draft Form 26 has been issued…

3 hours ago
  • Income Tax

When no addition is made on the basis of reasons recorded, reopening is bad in law

When AO do not make any addition on the basis of the reasons on which the reopening was done, the…

4 hours ago
  • Insurance

No separate compensation for loss of love and affection under MV Act – SC

Under MV Act separate compensation can not be granted under the head “loss of love and affection” – Supreme Court…

23 hours ago
  • Income Tax

Trust accredited by National Open School eligible for registration u/s 12AB & u/s 80G

Trust accredited by National Institute of Open Schooling eligible for registration u/s.12AB and u/s 80G of the Act. In a…

1 day ago
  • Income Tax

Delay in furnishing Form 10B – Covid Period to be excluded as per decision of Supreme Court

Delay in furnishing Form 10B – Period between 15.03.2020 till 20.08.2022 to be excluded as per decision of Hon'ble Supreme…

3 days ago
  • Income Tax

Section 271AAB does not grant any immunity from penalty in terms of section 273B

Section 271AAB does not grant any immunity from penalty even if the assessee was able to show some reasonable cause…

3 days ago