The PCI SSC recently released a draft information supplement with suggested best practices to stop attacks by assessing the security of an ATM and its components. The PCI SSC has been focused primarily on protecting PIN devices yet this supplement will address broader issues such as communication and processing by increasingly sophisticated ATMs.
Comments are being solicited from Participating Organizations until November 13, 2012 on the ATM Security Guidelines Information Supplement.