January 28, 2014

Windows XP support for ATMs ends in April

Recent reports are warning financial institutions – including credit unions – that use Windows XP operating system for its ATMs that support for that system will expire April 8.

Financial industry experts are urging financial institutions to upgrade their systems, or at the very least adopt other security standards. NAFCU raised this issue with NCUA in the past, pointing out the potential impact this discontinuation will have on credit unions. Also, financial institutions required to follow the Payment Card Industry Data Security Standard and that continue to use XP after April 8 may no longer be in compliance.

Federal Financial Institutions Examination Council agencies, which include NCUA and CFPB, said in a statement last October that credit unions and banks should evaluate their risk management processes if they choose to continue using XP after April 8. They said important actions to consider include:

  • identifying and measuring the risk from the continued use of XP;
  • considering costs and potential risks in selecting a mitigation strategy;
  • conducting appropriate planning to address priorities for changes; and
  • monitoring the risk mitigation to ensure an acceptable level of risk.