A management terminal manages a plurality of Self-Service Terminals (SSTs) for customer-assistance, transaction overrides, theft determinations, and transaction security audits. One or more overhead cameras stream real-time video of the transactions being processed at the SSTs to a server. Transaction data produced in real time at the SSTs are also provided to the server. The video is correlated with the transaction data and evaluated for security events. The video is also cached on the server. An operator of the management terminal can access a video review interface based on events and/or information visually gleaned by the operator during the transactions. The interface permits the operator to view a configured cached portion of the video captured for any given transaction to provide context to the operator for determining whether to perform or whether not to perform a transaction audit.