The 2019 Guide for Completing a Third-Party ACH Risk Assessment is a publication designed to assist in completing a step-by-step assessment. Each Third-Party Sender is required to perform a risk assessment of their ACH activities and implement a risk management program in accordance with the requirements of the NACHA Operating Rules. Individual sections within the document address: risk management systems & controls, credit risk, high-risk activities and direct access to the ACH Operator, compliance and transaction risk, vendor & third-party management, information technology & information security and business continuity. A pre-assessment checklist and guide directions are included to assist the assessor. The document includes tools to help the assessor understand ACH participants and payment applications.