Restrict debit card transactions to online transaction authorizations only.

CONTROL ID
13073

CONTROL TYPE
Technical Security

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish, implement, and maintain an Automated Teller Machine security program., CC ID: 13060

There are no implementation support Controls.

For transactions that customers perform with their ATM cards, the FI should only allow online transaction authorisation. The FI card issuer, and not a third party payment processing service provider, should perform the authentication of customers' sensitive static information, such as PINs or passwo… (§ 13.1.3, Monetary Authority of Singapore: Technology Risk Management Guidelines)