Wire callback verification

Control Design Assessment (CDA)

Procedures evaluating whether the control is designed adequately.

1. 1.Obtain and read the callback procedure; confirm it requires an independent caller (not the transaction initiator) and defines what qualifies as non-standard instructions.
2. 2.Confirm the callback number used must come from a verified source of record rather than the instruction being verified.

Control Operating Effectiveness (COE)

Procedures evaluating whether the control operated over the testing period.

1. 1.Select 25 non-standard wire instructions from the period and confirm a callback was performed and documented before release.
2. 2.Confirm none of the sampled callbacks were performed by the payment's own initiator.
3. 3.For any wire released without a completed callback, confirm a documented exception approval exists.

Linked risks

• Wire fraud via social engineeringmitigation 3

Framework mappings & latest test