• OM-5.1 OM-5.1 Physical Security Measures

    • External Measures

      • OM-5.1.1

        The content of this section is applicable to all full commercial banks licensed by the Agency in the Kingdom of Bahrain.

      • OM-5.1.2

        All head offices are required to maintain Ministry of Interior ("MOI") guards on a 24 hours basis. All branches must maintain a 24 hour MOI guard. However, if branches satisfy the criteria mentioned in paragraphs OM-5.1.3 to OM-5.1.20 below, they may maintain MOI guards during opening hours only. Furthermore, banks will be allowed to replace MOI armed guards with private security guards subject to the approval of the MOI. Training and approval of private security guards will be given by the MOI. Head Offices must always have a 24 hour MOI guard.

      • OM-5.1.3

        Public entrances to head offices and branches must be protected by measures such as steel rolling shutters, or the external doors must be of solid steel or a similar solid material of equivalent strength and resistance to fire.

      • OM-5.1.4

        Other external entrances should have steel doors or be protected by steel rolling shutters. Preferably, all other external entrances should have the following security measures:

        •  Magic eye.
        •  Locking device (key externally and handle internally).
        •  Door closing mechanism.
        •  Contact sensor with alarm for prolonged opening time.
        •  Combination access control system (e.g. access card and key slot or swipe card and password).

      • OM-5.1.5

        If additional security measures to those mentioned in OM-5.1.3 and OM-5.1.4 such as security cameras, motion detectors or intruder alarms are installed, the requirement for steel external doors or protection by steel rolling shutters is waived.

      • OM-5.1.6

        External windows should have security measures such as anti blast films and movement detectors. For ground floor windows, banks may also wish to add steel grills fastened into the wall.

      • OM-5.1.7

        Branch alarm systems should have the following features:

        a) PIR motion detectors
        b) Door sensors
        c) Anti vibration/movement sensors on vaults
        d) External siren
        e) The intrusion detection system must be linked to the bank's (i.e. head office) monitoring unit and also the MOI Central Monitoring Unit.

    • Internal Measures

      • OM-5.1.8

        Teller counters must be screened off from customers by a glass screen of no less than 1 meter in height from the counter work surface or 1.4 meters from the floor.

      • OM-5.1.9

        All areas where cash is handled must be screened off from customers and other staff areas.

      • OM-5.1.10

        Access to teller areas must be restricted to authorised staff only. The design of the teller area should not allow customers to pass through it.

      • OM-5.1.11

        Panic alarm systems for teller staff must be installed. The choice between silent or audible panic alarms is left to individual banks. Kick bars and/or hold up buttons must be spread throughout the teller and customer service areas and the branch manager's office. The panic alarm must be linked to the MOI Central Monitoring Unit.

    • Cash Safety

      • OM-5.1.12

        Cash precious metals and bearer instruments must be kept in fireproof cabinets/safes. Preferably, these cabinets/safes should be located in strong rooms.

      • OM-5.1.13

        Strong rooms must be made of reinforced solid concrete, or reinforced block work. Doors to strong rooms must be steel and preferably also have a steel shutter fitted. Dual locking devices should be installed in strong room doors. Strong room doors should be located out of the sight of customers.

      • OM-5.1.14

        Strong rooms must not contain any other openings except the entry door and where necessary, an air conditioning outlet. The air conditioning outlet must be protected with a steel grill.

      • OM-5.1.15

        ATMs should not normally be replenished during customer opening hours. Replenishment of off-site ATMs should be performed by specialised service providers, comprising a crew of at least two persons. ATM replenishment staff must carry a mobile phone or communication device in case of emergency.

      • OM-5.1.16

        All cash movements between branches, to and from the BMA and to offsite ATMs should be performed by specialised service providers.

      • OM-5.1.17

        All ATMs must be properly maintained and covered by service or maintenance agreements. All ATMs must be inspected daily by bank staff to check that they are functioning properly and have not been tampered with.

      • OM-5.1.18

        All banks must maintain a list of all maintenance, replenishment and inspection visits by staff or other authorised parties.

      • OM-5.1.19

        All ATMs must be fitted with fraud detection and inhibiting devices (mandatory by year end 2006).

    • CCTV Network Systems

      • OM-5.1.20

        All head offices and branches must have a CCTV network which is connected to a central monitoring unit located in the head office, and to the MOI Central Monitoring Unit.

      • OM-5.1.21

        The location and type of CCTV cameras is left to the discretion of banks. At a minimum, CCTV cameras should cover the following areas:

        a) Main entrance
        b) Other external doors
        c) Any other access points (e.g. ground floor windows)
        d) The banking hall
        e) Tellers' area
        f) Strongroom entrance
        g) ATMs (by way of internal or external cameras)

      • OM-5.1.22

        Notices of CCTV cameras in operation should be put up for the attention of the public. CCTV records should be maintained for a minimum 45 day period. The transmission rate (in terms of the number of frames per second) should be high enough to make for effective monitoring. Delayed transmission of pictures to the Central Monitoring Unit is not acceptable. The CCTV system should be operational 24 hours per day.

    • Training and Other Measures

      • OM-5.1.23

        Banks should establish the formal position of security manager. This person will be responsible for ensuring all bank staff are given annual, comprehensive security training. Banks should produce a security manual or procedures for staff, especially those dealing directly with customers. For banks with three or more branches, this position should be a formally identified position. For banks with one or two branches, the responsibilities of this position may be added to the duties of a member of management.

      • OM-5.1.24

        The security manager must maintain records on documented security related complaints by customers and take corrective action or make recommendations for action on a timely basis. Actions and recommendations must also be documented.

      • OM-5.1.25

        Banks should consider safety and security issues when selecting premises for new branches. Key security issues include prominence of location (i.e. Is the branch on a main street or a back street?), accessibility for emergency services, and assessment of surrounding premises (in terms of their safety or vulnerability), and the number of entrances to the branch. All banks are required to hold an Insurance Blanket Bond (which includes theft of cash in its cover).