Audits & Risk Management

* All sales of electronic publications are final. Due to the nature of digital products, we are unable to offer refunds, exchanges, or cancellations once the purchase is complete. By completing your transaction, you agree to these terms.

If you experience any issues accessing your purchased content, please contact SFE at 800-626-4733 for support.

Audit & Risk
Assessment Tools
Risk Management

ACH Audit Workbook

Electronic Format

Electronic Publication: Regulators and the ACH Rules require all financial institutions to conduct an ACH Compliance Audit annually. This user-friendly workbook will eliminate guesswork and guide you through conducting a risk-based ACH Compliance Audit by examing ACH Rules, ODFI and RDFI sound business practices, OFAC processes and other payments-related regulatory requirements. The 2025 edition includes minor enhancements to improve process flow and content quality. Instructions for use are included. Upon completion of the workbook pages, a summary report is generated to help you quickly identify and prioritize changes to reduce risk.

Note: This product is intended for One-Time Use. This publication is copyrighted and the purchase is good for one use. All digital purchases are final.

ACH Risk Assessment Workbook

Electronic Format

Electronic Publication: Designed to assist Financial Institutions, both RDFIs and ODFIs, in addressing ACH risk, this workbook covers risk obligations as defined in OCC Bulletin 2006- 39, ACH Risk Management Guidance, the FFIEC Retail Payment Systems IT Examination Handbook and current ACH Rules. Chapters include System and Controls, Credit Risk, High-Risk Activities, Compliance Risk, Third-Party Service Providers, Fraud Risk, Operational and Transaction Risk, and Information Technology Risk. Recent updates address data security, personnel practices, physical security, operational controls, credit risk related to Originator due diligence and Business Continuity planning and testing. By completing user-friendly worksheets, this workbook will identify strengths and weaknesses in your existing ACH risk management program and assist with the development of a comprehensive risk management program. Compliance officers, audit personnel and operations staff will find this to be a valuable tool.

Note: This product is intended for One-Time Use. This publication is copyrighted and the purchase is good for one use. All digital purchases are final.

Third-Party Sender ACH Risk Assessment Workbook

Electronic Format

Electronic Publication: The Third-Party Sender ACH Risk Assessment Workbook is designed to assist Third-Party Senders of all types in addressing their ACH risk. Content of the Workbook includes risk obligations as defined in the OCC Bulletin 2006-39, ACH Risk Management Guidance, the FFIEC Retail Payments Systems' IT Examination Handbook, FFIEC Guidance to Internet Banking and the current Nacha Rules. By answering yes, no, or not applicable, this Workbook will identify strengths and weaknesses in your existing ACH risk management program. Individual chapters address System and Controls, Credit Risk, Compliance Risk, High-Risk Activities, Third-Party Service Provider Risk, Operational & Transaction Risk and Information Technology Risk. EPCOR’s Third-Party Sender ACH Risk Assessment Workbook guides you in evaluating the Third-Party Sender’s risks by asking thought-provoking questions about its current ACH policies, procedures and processes. The 2025 Third-Party Sender ACH Risk Assessment Workbook has been updated for the 2025 Nacha Rules User-friendly worksheet questions are easily answered and include room for comments, to assist in developing a comprehensive ACH risk management program for your company. Compliance officers, audit personnel and operations staff within your organization will find the Workbook a valuable tool.

Note: This product is intended for One-Time Use Only by Third-Party Senders. This publication is copyrighted and the purchase is good for one use. All digital purchases are final.

Remote Deposit Capture Risk Assessment Workbook

Electronic Format

Electronic Publication: The RDC Risk Assessment Workbook is a comprehensive, easy-to-use tool designed to assist Financial Institutions in addressing their remote deposit capture risk. The Workbook content mirrors the FFIEC Remote Deposit Capture Risk Management Guidance. The Remote Deposit Capture Risk Assessment Workbook guides you in completing the step-by-step risk assessment questions. The user-friendly Excel worksheet questions are easily answered with Yes, No, or Not Applicable and include room for comments, to assist you in developing a comprehensive RDC risk management program. Operations staff, risk managers, compliance officers as well as audit personnel will find this workbook a useful tool.

This publication is formatted as a PDF document. Users must have access to Adobe Reader.

Format: PDF

Note: This publication is copyrighted and the purchase is good for one use. All digital purchases are final.

ODFI Audit Checklists for Originators & Third-Party Senders

Electronic Format

Electronic Publication: This tool contains a series of ODFI Audit checklists providing an efficient tool for ODFIs to gauge their Originators/Third-Party Senders understanding and compliance with the ACH Rules. These checklists can be completed by financial institution staff or sent to the Originator and/or Third-Party to complete on its own and then return to the ODFI. Each Audit Checklist is a fillable PDF form for each type of ACH application. Complete or send the forms that are specific to the ACH services your institution originates.

This publication is formatted as a PDF document. Users must have access to Adobe Reader.

Format: PDF

ACH Risk Management Handbook, 8th Edition

Various Formats

Hardcopy: The 8th edition provides the latest information on Nacha’s strategies to identify and mitigate risks and provides recommendations for developing an effective risk management program for any organization involved in the creation or processing of ACH transactions. The threats to ACH payments are not unique to the ACH Network and the lessons learned can be applied to create a holistic payments risk management program. In addition, case studies are included in each chapter to offer realistic examples to assist you in evaluating and implementing your risk management program.

via App(E-book): This Adobe-based product requires a third-party app called Flux Player to allow the content to be redeemed, downloaded to, and accessed only within the app. The content is read-only, E-book display is identical to the hard copy book. Once a Flux Player account app has been created and the content is redeemed within the Flux Player app, the content can be accessed on up to two devices using the same app account. Works on PC/Windows, Mac (OSX), Android phones and tablets, Apple IOS, and Kindle.

Note: If your organization requires special permission to download and/or install programs, please contact your IT department for assistance before purchase.

Note: All digital purchases are final.

ODFI Risk Management Guide

Electronic Format

Electronic Publication: The purpose of this guide is to provide an easy to comprehend understanding of the risks of the ODFI (Originating Depository Financial Institution). It is designed to assist users with identifying and mitigating ODFI risk when operating in the ACH environment.

This guide contains the following attachments:

20-page ODFI Risk Management Guide
ODFI Risk Management Checklist
ACH Origination Approval Form
ACH Exposure Limit Change Request Form
ACH Originator Signature Agreement
Company ACH Transmittal Letter
ACH Origination Activity Review Form
ACH File Confirmation Form
ACH Security Framework Guidance and Checklists

Format: PDF/Word

Revised Uniform Commercial Code Article 4A and the ACH System - 4th Edition

Various Formats

Hardcopy: The refreshed 4^th Edition contains new statistics and evaluates the impact of the UCC 4A on security procedures, bank/corporate agreements, recommended contractual provisions, errors, unauthorized entries, and more. Includes Article 4A (law unchanged) with staff commentary. For financial institutions and corporations that handle ACH wholesale credits.

Note: If your organization requires special permission to download and/or install programs, please contact your IT department for assistance before purchase.

Note: All digital purchases are final.