Assurance • Security Assessments

Strengthen Your Cyber Security with Our Self-Service Terminal (SST) Assessment

  • Bank Negara Malaysia (BNM), in Appendix 2 of their Risk Management in Technology (RMiT), stated that Financial institutions should ensure the adequacy of physical and logical security and controls implemented on the Self-Service Terminals (SST), both cash and non-cash and have defined the scope of coverage.
  • SST Assessment will include assessment of both centrally defined and administered security controls such as anti-virus and patching as well as onsite security controls at both the SST and its surroundings, such as system hardening, physical security, etc. This assessment is specific to the Financial Sector.
  • With the experience of having carried out SST Assessment for Financial Institutions, FIRMUS, as a technically competent external service provider, provides SST Assessment services using our methodology to comprehensively address these requirements. This progressive methodology ensures that we are able to holistically address the governance, technical and physical security requirements stated in BNM RMiT’s Appendix 2.

Our SST Assessment Methodology

STAGE 1 - SCOPE AND PLAN

Confirm Scope

Plan Project Schedule

STAGE 2 - ASSESS

IT Security Assessment

Physical Security Assessment
Assessment of Security Governance and Processes

STAGE 3 - REPORT

SST Assessment Report

STAGE 1 - SCOPE AND PLAN

Confirm Scope

Plan Project Schedule

STAGE 2 - ASSESS

IT Security Assessment

Physical Security Assessment
Assessment of Security Governance and Processes

STAGE 3 - REPORT

SST Assessment Report

Explore Our Security Assessment Services

Let us help you make informed decisions and set your business up for success through our range of security assessment services.

Security Posture Assessment (SPA)

MAS Threat and Vulnerability Risk Assessment (TVRA)

BNM Data Centre Resilience and Risk Assessment (DCRA)

Self-Service Terminal (SST) Assessment

Physical and Environment Security Assessment

Talk To Us

Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.