HOLD IT!! how is your branch’s physical security dashboard? (1)

0

The Kenyan Commercial Bank robbery

“NAIROBI (Reuters) – In a heist reminiscent of a Hollywood movie, Kenyan robbers spent months tunneling into the bowels of a bank located opposite a police station and stole the equivalent of half a million dollars, police said on Tuesday.

Police said they had arrested two men and one woman over the robbery but had not recovered the 50 million Kenyan shillings, reported missing by staff at the branch of Kenya Commercial Bank (KCB) on Monday when they showed up to work.

“We have not recovered the stolen money,” said Simba Willy, sub-county police commander in the town of Thika, northeast of Nairobi, where the heist took place.

“We suspect the robbers hired one of the shops near the bank (while digging their tunnel),” Willy told Reuters.

The robbers were able to remove the earth during their months-long excavations without arousing suspicion by concealing it in boxes, the Daily Nation newspaper quoted local traders as saying.

The traders described the two young men who had rented the store as “very hardworking” and “introverts”.

This latest news about the break-in of the Kenyan Commercial Bank through a tunnel dug into the vault reminds me of a film I watched many years ago, where a group of bank robbers used exactly the same technique.

Physical Security in Branches

It seems like physical security in branches is treated lightly. A few years ago, I had the opportunity of do a countrywide operational risk awareness program in branches. This countrywide experience left me with vivid memories of how vulnerable we can be in branch banking. It explained the necessity of making sure that policies and procedures on risk need to be as down to earth and practical as possible.

What is the point in sitting in board rooms carving out beautifully-worded handbooks for staff when they have no idea the various concepts and fundamental reasons that went into the policy decisions? They have to be regularly hammered on and escalated down for all staff to appreciate and use. By the way, how is your branch’s physical risk management dashboard?

What is risk anyway? “Risk is the potential of gaining or losing something of value. Values can be gained or lost when taking risk resulting from a given action or inaction, foreseen or unforeseen. Risk can also be defined as the intentional interaction with uncertainty” ….Wikipedia

Do you know that branches are the ‘nerve centers’ of banks and therefore the key outlets where most transactions take place, and obviously at more risk? Banks’ traditional functions have been collecting funds for lending. The main risks in these functions are credit risk and operational risk. Credit risk is the failure of borrowers to pay their loans. Following closely is operational risk.

What is Operational risk?

The Basel Committee defines the operational risk as the “risk of loss resulting from inadequate or failed internal processes, people and systems or from external events”. This definition includes human error, fraud and malice, failures of information systems, problems related to personnel management, commercial disputes, accidents, fires, floods… In other words, its scope seems so wide you do not immediately perceive the practical application.

Enough of definitions…let us look at how these fit in with the bank branch’s activities.

Visits to Branches

An awareness program should not just be made up of itemizing a list of ‘do’s and ‘don’t’s. People easily get fed up listening to instructions….it is the same…same …same. Why don’t you try the following interesting methods: On the day of your proposed visit, ensure that you reach the destination very early…latest by 6.30am when most staff may not have arrived. What are the likely revelations?

  • The security guard is not ready for work…still dressed in mufti clothes or not even available….perhaps the night shift security man has left….leaving the branch very vulnerable.
  • The front door is left ajar, especially in branches where there is only one entrance (no back door, only one exit in case of fire or alarms) seriously? Where is our Bank of Ghana? Did it allow branches to be opened without visiting the structures? You can enter the branch without your ID. If they don’t even know you, just tell the security guard and cleaner that you are from Head office to conduct training. After admiring your car, some of them will let you in with a flourish….carrying your laptop bag after you and giving you the full African respect! I could be carrying a bomb or a gun! In one branch, it was the cleaner who stopped me in my tracks and called the branch manager on phone to confirm my visit. Yes, that cleaner was recommended for some appreciation, for his show of security consciousness.
  • The cleaner will be observing you with some apprehension as you go round the branch, opening the unlocked cabinets, opening unlocked drawers which contain some incriminating documents….you know what. Sure, the cleaners wake up early to ensure the premises are clean before staff arrive. Nobody wants to be met with dirty surroundings. But dear Branch Manager/Operations Manager, do you know that “while you are busy sleeping, your legs are outside” (direct translation from an Akan proverb). Ok. you take your much needed beauty sleep, but these are some of the dangerous state or red flags you might have left the branch in:
  • Cluttered desks, confidential documents in the printer, identity cards in the Remittance Teller’s enclosures which some excited customers forgot after receiving their remittances from abroad.. (sika ye mogya) loose and opened files showing customers’ correspondence with the bank, with their exposed signatures and personal information!!
  • Unshredded documents like computer print-outs of customers’ transactions revealing so much information which fraudsters would have paid thousands of cedis to get. The duty of confidentiality has become a joke.
  • Customers’ copies of cheque or cash deposit slips in the drawers of tellers, and customer service staff.
  • Blank letterheads, statement sheets and even real customers’ statements waiting to be collected……as for this one, it is gold for visa racketeers!!
  • Unlocked cabinets with customers’ loan files and mandate files……Oh what a treasure for recalcitrant loan defaulters! Do you want to take them to court for willful default? Wait until you start preparations for court, and you will never find the original loan file! It is an age-old problem. Really, there is nothing new under the sun.
  • Official stamps lying about. When it is copied and used your fraud, you may suspect the poor, innocent cleaner.
  • CCTV not working? Have you notified the authorities? How is it positioned? Where do you keep the back-ups? Are the recordings being over ridden as you re-play? Is your complaint logged?
  • Electronic gadgets still on after close of work, and overnight…especially the printers, air conditioners, photocopiers, kettles still plugged in, etc? Why not? Many staff may not have had any training on fire prevention and may be ignorant of such end of day procedures.

Collecting all such exhibits and exposing risky issues during any fraud and risk prevention training makes much more sense to the staff as they begin to appreciate the extent to which their activities can lead to losses to the bank.  Ignorance is indeed a disease.

The era of kiosk banking, supermarket banking – less cash, less stress

With the coming of digital banking, there is supposed to be less reliance on cash. If I want to shop at a mall, I only need to carry my visa card, or even shop online. Since the era of digital banking, kiosk banking, supermarket banking, agency banking etc, the need for a reduced reliance on cash is paramount.

In layman language, kiosk banking is the service provided by the bank with the help of technology through which one can perform various banking activities without visiting the bank.  Let us look at an example from India: A retailer can open a bank account for a customer by recording fingerprint details and taking a photograph of the customer. The details along with other documents are forwarded to the affiliated bank branch to carry out the know-your-customer process. Once the account is up, a customer can withdraw, deposit or remit a maximum amount of money per day through the internet-enabled kiosk branch.

Desperate to keep their customers happy and overhead costs low, many banks have started downsizing and moving into supermarkets, reports SmartMoney’s Charles Passy. According to them “ Not only do these branches help lower their costs—bricks-and-mortar real estate can cost hundreds of thousands of dollars—they guarantee the banks an influx of foot traffic from grocery shoppers. The branches also may help consumers with limited banking options in rural areas, and offer disgruntled customers the opportunity to log more facetime with customer service—a way to boost customers’ perceptions of the bank in the long-run’. 

Cash limits

Gone are the days when branch managers preferred to keep large sums of cash in the vault, in anticipation of huge cash withdrawal requests from their customers. The need to make maximum use of cash has necessitated Treasurers of banks keep a close eye on vault cash holdings of branches to ensure regular evacuation to the central bank and to enable overnight placements for maximum gains. The insurable cash limits of branches need to be adhered to, while customers should be counselled to patronize other cash-lite products and reduce their reliance on cash. I hope the cash stolen in the Kenya Commercial Bank was within the branch’s insured limits.

I will pause here. Next week, I will continue to give more practical insights into physical security at the branches. Meanwhile, be on your guard, for no surprises.

ABOUT THE AUTHOR

Alberta Quarcoopome is a Fellow of the Chartered Institute of Bankers, and CEO of ALKAN Business Consult Ltd. She uses her experience and practical case studies, training young bankers in operational risk management, sales, customer service, banking operations and fraud.

CONTACT

Website www.alkanbiz.com

Email:alberta@alkanbiz.com  or [email protected]

Tel: +233-0244333051/+233-0244611343

 

 

 

Leave a Reply