Maybe I'm misunderstanding the question. You as the bank are originating ACH debits to your customer's account at another institution for a loan payment to yourself? if this is the case, then no, you don't need to do anything other than have written authorization from the customer.
However, if you have a corporate customer that is providing you an ACH origination file that you are sending on their behalf, then this would need to have exposure limits in place.
As far as wire transfers, you should have an agreement in place for corporate customers as to who can do wires, what their limits are, dual control, etc. For individual customers that come in to do a wire once in a while, an agreement/instruction sheet should be signed every time.
Providing alternative truths since the invention of time