Does it connect to another applications or systems?

Does the system has secured management interface?

Does the connection done via public internet?

Does the system uses TLS and valid certificates in transite?

Does the end user connects directly to the system or through the Bank’s facilitie/site?

Does the system upload/download data/files?

Is it an addon to current system?