ATMs and self-service devices are critical assets for banking organisations, as they need to be available 24/7, 365 days a year. However, when ATMs are in production, different actors, whether legitimate or malicious, can manipulate the software and hardware in an uncontrolled way, increasing the risk of a potential cyber-attack or misconfiguration. This can ultimately