This article presents the five defensive measures to improve the cyber security of EATM: ensure competency, maintain a cyber risk assessment, control the supply chain, exercise cyber resilience, act.