Conducting a Physical Security Review & Risk Assessment

RTP Operating Rules section IX.A.2 requires every RTP Participant to complete an annual self-audit verifying compliance with the Participation Rules and the Operating Rules. Participants must complete and sign the Self-Audit Form and submit it to The Clearing House (TCH) by March 31 of the following year. TCH does not prescribe a specific audit methodology, but it does identify a comprehensive list of key topics that Participants are expected to evaluate.

This session will walk RTP Participants through how to actually conduct the annual self-audit. Drawing directly from TCH’s Self-Audit Workbook and the RTP Operating Rules effective September 30, 2026, the session will cover all 35 key topics across general Participant responsibilities, fraud and risk monitoring, errors and unauthorized payments, the Request for Payment (RFP) lifecycle, and Participant-as-Sending-Participant-of-PSP-customers’ requirements. Attendees will leave with a section-by-section audit checklist, a completion guide, and a clear path to finishing the self-audit by the March 31 deadline.