The objectives of security for ATM's include developing countermeasures against loss, limiting vulnerabilities, and decreasing liabilities. Specifically, security aims are to reduce the probability of burglary, vandalism, fraud, and attacks against customers or service personnel; institute measures to lessen the severity of loss or injury when problems do occur; and, in situations such as fraud, facilitate the recovery of lost assets and the prosecution of offenders. The development of sound countermeasures should include a risk analysis that provides planning data. Ideally, security planning should include appropriate site selection; and on-premise site is to be preferred, since this is easier and less expensive to secure than an off-premise site. Site features should include lighting and public visibility for customers but an enclosed and secure area for personnel servicing the ATM. Another security feature is the use of closed-circuit television cameras. Service personnel, whether under a security contract or bank employees, should have prescribed security procedures to follow. Bank customers should be informed about security procedures to follow when using an ATM, and the bank should adopt methods for ensuring that customer cards do not fall into the wrong hands. The bank can protect itself against losses due to fraud by having some basic software controls in place. If possible fraud is detected, the account should be frozen until an investigation is completed.