Skip to main content

Section 4 Physical Security and Safety Systems

Effective from 2008-08-24 - Aug 23 2008
To view other versions open the versions tab on the right

Synopsis 
 
This section describes the minimum requirements and standards for Physical Security and Safety Systems installed throughout the banks facilities.
 
1.0 INTRODUCTION  

The purpose of installing physical security and safety systems is to enhance the electronic and procedural measures employed to protect, deter and mitigate the effects of a serious incident and/or criminal activity.

No single system in isolation is completely effective, and it is only through their layered approach, physical barriers, manned guarding, effective management and clearly identified procedures and policies can their use be fully maximised to best effect.

Due to the variety and availability of internationally recognised standards It is left to the bank and its internal policies and practices to dictate the appropriate standards for such systems.

The every increasing availability of, equipment and changes / advancements in technology provides an extensive selection of products to choose from. The selection of the appropriate systems and equipment is dependant upon the security and business requirements of the bank.

The guidelines contained within this document are designed to provide a minimum requirement that must be met and included for all physical security and safety system installations.

  
2.0 EXTERNAL SECURITY AND SAFETY MEASURES  

The first line of deterrence and protection for any facility is the application of measures to secure the external perimeter.

The effective use of measures and systems will greatly reduce the risk of criminal elements considering the facility a potential target for their activities and in preventing easy access.

  
2.1 Windows and Glass Panels  

The increased use of glass in buildings and branches provide an alternative entry point to the much better protected main entrances.

Glass panels provide both a security and a safety risk to a facility, its personnel and customers.

The most vulnerable areas are on ground level and those obscured from public sight. To protect and secure these locations the following options are to be installed:

  
 1.Sheet/Tempered Glass - is to have security/blast film (min 200 microns) attached to the inner surface and be secured within the frame. A minimum thickness of 10mm is to be used for the glass panels.
 2.Laminate Glass - does not require additional measures added to the panels.

Laminate glass panels are to be capable of multiple attacks and be tested/certified by internationally recognised standards.

All ground floor windows/glass panels are to be of clear glass (or maximum 10% tint) and lighting is to be left on during 'out of working' hours to maximise external surveillance.

The use of grills and shutters to secure the facility during 'out of hours' can be used but will not reduce the above requirements for the glass panels.

Windows and glass panels in upper floors still require an element of protection for personnel who may be at risk from flying/broken glass. To ensure the safety of personnel in the upper floors the following options are to be installed:

 1.Sheet Glass - is to have security/blast film (min 150 microns) attached to the Inner surface and be secured within the frame.
 2.Tempered / Laminate Glass - does not require additional measures added to the panels.
2.2 Main Entrances  

All bank facilities are to have at least one main entrance that is to be used for its primary access control point.

These entrances are to be kept to a minimum to ensure their control of access and surveillance capability. All staff and service entrances are to be treated in the same way.

All glass doors are to conform to the above standards (2.1) in the type and protection required.

All non-glass doors are to be of solid wood or steel construction and fitted with an eye-hole if an observation window is not available.

All access doors to the main entrances are to have a manual locking capability regardless of its primary operating action.

Dependant upon the use of the main entrance, the results of a Security Risk Assessment (SRA) and the procedures identified within the Entry Point Screening procedures of the Corporate Security and Safety Plan (CSSP), the following screening equipment may be required:

  
 1. Baggage X-Ray Screener
 2.Archway Metal Detector
 3.Hand Held Metal Detectors
2.3 Emergency Exits  

Emergency exit doors are the primary means of exiting a facility in the event of an incident and should provide unrestricted use from the inside.

As these locations are easily accessible from the outside they are to be secured using the following measures:

Internally:

  
 1.A mechanical push bar/lever is to be fitted to the internal surface. 
 2.Electronic locking systems are to be on a 'fail open' setting. 
 3.Magnetic Contact connected to the Intruder Alarm System
 4.CCTV Camera
 5.An eye-hole.
 6.Appropriate exit signage and lighting.
Externally:
 1.Flat door plate with no handle.
 2.CCTV Camera and PIR.
As part of the fire safety requirements, all routes leading to the emergency exit are to be clear of obstructions and have appropriate signage and lighting to facilitate easy exit.
2.4 ATM Locations  

In addition to a facilities' cash holding areas the Automated Teller Machines (ATM) are to be considered high risk. The diversity in their locations (Branch, Drive Up, and Stand Alone) and the cash they hold make them an attractive target compared to highly secured locations such as vaults and safes contained within buildings and branches.

Only internationally recognised standards and providers are to be used in the purchase of ATM units.

Whilst the locations are dictated by the bank in conjunction with SAMA and Police approval, there are a number of minimum security requirements and are as follows:

  
 1.All ATM units are to be securely fixed to a solid base using at least four (4) points.
 2.All cabling is to be buried/hidden where possible.
 3.All exposed cabling is to be contained within a steel conduit.
 4.All waste paper containers should only facilitate the use of receipt slips and be self extinguishing.
 5.All ATM units are to have external lighting on 24 hour operation.
 6.All intruder/fire panels are to have tamper sensors fitted.
 7.All ATM cabinets are to have the following security measures:
  a.Access via high security lock and cylinder or electronic access control.
  b.Door contact connected to intruder alarm panel.
  c.Seismic/Vibration Sensor (Section 3)
  d.PIR connected to the intruder alarm panel (Section 3).
  e.Hold Up Button (Section 3).
  f.Smoke and Heat Sensor.
  g.External alarm bell and strobe.

All ATM units are to have CCTV surveillance (Section 3) that is recorded on its own Digital Recording system, or remotely, through the system incorporated within branch it is attached to.

All ATM units are to be connected to a remote Central Monitoring Station (CMS) for the activation of alarms from any of the fitted sensors.

3.0 INTERNAL SECURITY AND SAFETY MEASURES  

Should the external security and safety measures be defeated and/or bypassed the internal systems are designed to delay and deter criminal activity as part of a layered methodology.

The internal security measures primarily concentrate on the Restricted Areas identified within a facility so that security can be effectively and efficiently focused.

Restricted Areas: are considered as follows:

  
 1.

Vaults, Safes and Safety Deposit

Rooms

 2.Teller Areas
 3.ATM Service Rooms
 4.Cash Holding Areas
 5.Cash Handling Areas
 6.Building Access / Entry Points
 7.Security Control Room
 8.Data / Computer Rooms
 9.IT /Communication Rooms
 10. Disaster Recovery (DR) Sites
 11. Electrical Rooms
Additional locations can utilise either electronic and/or mechanical means to secure their access and Include the following:
 1.ATM Cabinets
 2.Generator Rooms
 3.PTT/PABX Room
 4.SCECO Switch Room
 5.Electrical Rooms
All Restricted Area doors are to have effective heavy duty door closures fitted.
3.1 Mechanical Locks  

Mechanical locks using keys are a standard means of securing doors throughout a facility.

In addition to the considered use of an electronic access control system, appropriate mechanical locks can be used in conjunction, or as a replacement, for the security of Restricted Areas (Section 3).

To compliment the electronic security and safety measures the physical requirements are as follows:

  
 1.All doors are to be of solid wood or steel construction with same quality material for door frames.
 2.All locks/cylinders are to be of high security standard with deadlocking mechanism and resistant to the following:
  a.Picking
  b.Drilling
  c.Overlift and Reading
  d.Rap and Rake
 3.All hinges are to be of steel heavy duty standard with non-rising or removable pins.
 4.All doors are to have heavy duty door closures fitted.
 5.All doors are to have appropriate security signage for Restricted Areas.

Restricted Areas are to be completely sealed outside the main entry points that are secured by the above / or electronic means. All false ceilings, floors, AC vents and other access points are to be considered and secured. All walls are to be of brick/block construction.

The other major consideration concerning mechanical locks is in the security and control of the keys.

As part of the requirements of the Corporate Security and Safety Plan (CSSP) the following is to be established for keys that access Restricted Areas:

 1.Log of all keys and the controlling department.
 2.Secure storage and issue procedures.
 3.Cylinder / Lock / Key replacements.
 4.Regular audits / inspections of the keys and issue log.
 5.Issue, storage and security of master keys and blanks.
3.2 Teller Areas  

The teller areas are considered a Restricted Area and incorporate a number of electronic security systems/sensors (Section 3) to protect them during working and silent hours.

The main threat against the tellers is a hostile attack from a customer, armed robbery and direct access to the vault, safe and/or cash holding area.

In consideration with the electronic systems, security guards and effective procedures that accommodate the main threats, the following options are available for protecting the teller area:

Option 1: Open Cash Drawer

  
 1.Tempered/Hardened glass (Min 10mm in thickness) is to be fitted to the top of the teller counter and extend for a minimum of 2m in height.
 2.Construction below the counter is to be of double brick/block with an external layer steel sheet.
Option 2: Automated Cash Dispenser
 1.An Automated Cash Dispenser is fitted to each teller position. The dispenser is to be securely fixed to the floor using at least 4 points and have the following security measures:
  a.Mechanical / Electronic access control mechanism.
  b.Seismic / Vibration sensor (Section 3).
 3.Suitable and appropriate signage is to be used to identify the use of Automated Cash Dispensers.

The main purpose of the above options is to provide additional delay for the police to respond as well as maximising the protection of the teller personnel, branch staff and customers.

As a result of a Security Risk Assessment (SRA) of the branch there may be a requirement to fit tempered/hardened glass to the top of the teller counter for Option 2. This will be dependant upon the risks identified in the area.

3.3 VAULTS AND SAFES  

The primary storage, security and safekeeping for the majority of cash holdings, valuables and high value documents in a facility are kept in the designated vault and/or safe.

Vault

In addition to the electronic security systems identified in Section 3, the following physical measures are to be incorporated:

  
 1.Vaults are to have walls, floor and ceiling of steel reinforced concrete with a minimum thickness of 30cm.
 2.Reinforcing is to be in horizontal and vertical staggered rows of 10cm forming a grid pattern using No5 diameter deformed steel bars. A minimum of at least two (2) grid patterns shall be used.
 3.The grids are to be in parallel with the face of the walls and secured using beam bolsters, wall ties or upper continuous high chairs and fastened together at the corners.
 4.The use of modular panels can be used if materials are rated to provide protection against attack using a cutting torch (oxyacetylene), mechanical and/or electrical tools for a net working time of 60 minutes.
 5.The main door is to be constructed of high strength stainless steel with a minimum thickness of 10cm. The door is to provide protection against attack using a cutting torch (oxyacetylene), mechanical and/or electrical tools for a net working time of 60 minutes.
 6.A double rotary mechanical combination and key system is to be used for access control of the main door. The keys are to be under dual control of two (2) senior bank/branch officers. Spare keys are to be kept and combinations are to be kept In a neighbouring branch vault.
 7.The frame of the main door is to be welded to the walls reinforcing bars and filled with concrete.
 8.A steel day gate is to be fitted with two (2) high security cylinders on both sides.
 9.If an optional emergency door is installed it must conform to the specifications of the main door.
 10.An emergency vault ventilator must be provided in the wall or vault door.
 11.A telephone is to be fitted inside the vault.
 12.All cables connected to the vaults security and safety systems are to be secured and protected within steel conduit.
Storage Requirements
The purpose of the below table is to provide a minimum security requirement for the identified amounts of cash and valuables. Where extremely high amounts (in excess of SR 20,000,000) are stored, protection levels and specifications are to be investigated and assessed separately.