OM-6.3.11
Banks must ensure that their device management/operation controls comply with the following:
(a) Software is protected and stored in a manner which precludes unauthorised modification; and
(b) Loading of software into ATMs is performed by a person who has the requisite knowledge and skills, and who has been nominated and authorised by a senior manager in the bank to undertake these tasks.
Added: April 2016