StacksVerified U.S. regulatory reference

12 CFR §21.3

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov
  1. (a)Contents of security program. The security program shall:
    1. (1)Establish procedures for opening and closing for business and for the safekeeping of all currency, negotiable securities, and similar valuables at all times;
    2. (2)Establish procedures that will assist in identifying persons committing crimes against the institution and that will preserve evidence that may aid in their identification or conviction; such procedures may include, but are not limited to:
      1. (i)Using identification devices, such as prerecorded serial-numbered bills, or chemical and electronic devices;
      2. (ii)Maintaining a camera that records activity in the banking office; and
      3. (iii)Retaining a record of any robbery, burglary or larceny committed or attempted against a banking office;
    3. (3)Provide for initial and periodic training of employees in their responsibilities under the security program and in proper employee conduct during and after a robbery; and
    4. (4)Provide for selecting, testing, operating and maintaining appropriate security devices, as specified in paragraph (b) of this section.
  2. (b)Security devices. Each national bank shall have, at a minimum, the following security devices:
    1. (1)A means of protecting cash or other liquid assets, such as a vault, safe, or other secure space;
    2. (2)A lighting system for illuminating, during the hours of darkness, the area around the vault, if the vault is visible from outside the banking office;
    3. (3)Tamper-resistant locks on exterior doors and exterior windows designed to be opened;
    4. (4)An alarm system or other appropriate device for promptly notifying the nearest responsible law enforcement officers of an attempted or perpetrated robbery, burglary or larceny; and
    5. (5)Such other devices as the security officer determines to be appropriate, taking into consideration:
      1. (i)The incidence of crimes against financial institutions in the area;
      2. (ii)The amount of currency or other valuables exposed to robbery, burglary, or larceny;
      3. (iii)The distance of the banking office from the nearest responsible law enforcement officers and the time required for such law enforcement officers ordinarily to arrive at the banking office;
      4. (iv)The cost of the security devices;
      5. (v)Other security measures in effect at the banking office; and
      6. (vi)The physical characteristics of the banking office structure and its surroundings.