Regulations Governing the Security Maintenance and Administration of Financial Institutions Article 6
A financial institution shall follow the provisions below in the implementation of security protection measures for its business premises, vaults, safe deposit boxes (rooms), automated teller machines, and cash transport operations: 1. Security protection measures for business premises (1) The large-sum teller counter installed at the business premises should be segregated with bars made of strong material or bullet-proof glass and installed with proper security devices. The cash counter should have proper height and its drawers should have automatic locking device. Tellers should habitually put the cash received in the drawer and lock the drawer or send it to the cashier's desk. (2) The operations department should rigorously control the entry of non-work personnel and install entry control facilities at the entrance. (3) The business units should hire security guard, security service provider, or other guards for the watch work.Notwithstanding the foregoing, a financial institution that has justified reasons and whose business unit has already had proper security protection measures in place may apply to the competent authority for exemption from the preceding requirement (see attached form for application format). 2. Security protection measures for vaults and safety deposit boxes (rooms) (1) Vaults and safe despot boxes (rooms) should implement rigorous entry control measures (facilities) and should not be in constantly open state. (2) The key and password to the vault should be kept separately by at least two designated personnel. The vault door should be installed with a time lock to control the opening time. (3) If the vault or safe deposit box (room) has flood concern, it should be installed with flood prevention, drainage and alarm systems. 3. Security protection measures for automatic teller machines (1) When installing an automatic teller machine, a financial institution should conduct comprehensive security evaluation and carefully select the installation site. For automatic teller machines installed off the business premises, a financial institution should consider whether the location is convenient for monitoring by the local precinct and give priority to places with security system, security guard or policeman on patrol. (2) Automatic teller machines should be installed at brightly lit places. (3) The installed automatic teller machine should be posted with instructions and notes for transactions and equipped with anti-burglary device, facilities that prevent peeping and allows users to detect activities behind their back, illumination fixture and necessary fire safety and escape equipment. (4) A financial institution should instruct its business units to step up the patrol the use, entrance control and other protective facilities of automatic teller machines installed on and off the business premises. (5) A financial institution should establish a mechanism for monitoring irregular withdrawal activities at the automatic teller machine and assign staff to take charge of the monitoring activity, and take prompt and proper action if any irregularity is found. A financial institution shall also monitor its automatic teller machines from time to time to prevent criminal vandalism (the patrol is particularly important during holidays and non-business hours), and keep a record of such patrol activities. 4. Security protection measures for cash transport operations (1) Unless with the approval of the head office for special circumstances, all branches of a financial institute shall contract a qualified professional cash transport service provider for the transport of cash (including foreign currencies) or cash collection service for specific customers and render necessary support and assistance by performing well related control work. If a financial institution transports cash on its own, it shall use an armored vehicle or a cash-in-transit truck converted from a regular vehicle, and heed the security of cash transport. (2) Cash-in-transit truck converted from a regular vehicle shall be equipped with engine power interruption switch and an anti-robbery and anti-theft metal cabinet with fixed password or an anti-theft cash box (bag) installed at a concealed spot in the vehicle, as well as necessary defense and alert outfits, rescue communication system, and fire extinguisher. (3) The cash transport route and time should be kept confidential and vary, and extraordinary situations should be identified ahead of time.