When commercial risk rating forms collect ACH activity- what is defined as ACH activity for the benefit of a BSA risk assessment? Is it anything EFT or is it specific to ACH? What exactly might ACH activity include for a commercial customer?
Thanks!

This depends on what products and services your bank offers and how you define those risks. The answer will vary from bank to bank. Does your institution have developed procedures from completing this form?

We could be talking Commercial ACH Origination, ACH credits received as an RDFI for credit card sales, ACH debit received as an RDFI to pay vendors, employees, taxes, etc.

Again, your institution should define the purpose of this form and what risks it is attempting to identify/mitigate.