Okay, I've read some of the previous posts on lockbox operations but I don't have my answer I'm looking for. We started performing a lockbox service to the local hospital here. We provide all the service internally. We even may at times have to go and pick up the payments from the lockbox if the post office couriers cannot. I'm trying to formulate an audit program and identify the risks and what kinds of controls I'm looking for. We probably will go this route for future customers vs. remote deposit capture. Any help or ideas, sources, compliance issues, etc.? Thanks so much!