The security officer must certify annually to the Board of Directors that the bank is in compliance with various security laws and regulations.

One of the laws is Title 7 of TAC 3.92 (Texas law) for the security of ATMs. There are others Regulation H for the alarms and vaults etc.

Does anyone have a listing of all the items that must be certified or reported to the BOD annually or a form that is used to report on all the laws and regulations?

I have such a list that was put out by Mosler years ago, and is still applicable. YOUR report should cover:
1)Physical Security Systems
2) Lighting Systems
3) Vaults
4) Safes (if any)
5)Alarm Systems
6) Cameras (if any)
7) Night Depository
8) ATMs (if any)
9) Currency Levels
10) Walk-up/Drive-In Teller stations
11) Office Teller Stations
12) Teller Procedures (Bait money, top drawer levels, second drawer locked, etc.
13) Check Cashing procedures
14) Savings Withdrawal procedures
15) New Account procedures
16) Safe Deposit Operations
17) Opening procedures
18) Closing procedures
19) Key and Combination Control
20) Bait money, dye packs and electronic homing devices (if any)
21) Height markers
22) Security of unissued official checks, travelers checks, money orders, etc. 23)Transportation and delivery of currency procedures
24) Visitor identification procedures
25) Computer security
26) Trash disposal/retention
27) Evidence protection procedures
28) Guard (if any)
29) Fire Security and evacuation procedures 29) Training

You'll note that I said YOUR report should cover all of these areas, in detail. But your report to the Board of Directors need only to say the bare facts, as illustrated in the following, which could serve as a pattern for all the subjects above you wish to include.

As directed by the regulations promulgated by ...........your regulator..........., the following is the security report on the implementation, administration and effectiveness of the security program for the ............name of your institution............

WRITTEN SECURITY PROGRAM
The written security program was approved by action of the Board of Directors at a regularly scheduled meeting on ..............

Since that time there has been no change in the regulations, the Government requirements, or in the circumstances of ..........your institution..............., therefore no action needs to be taken regarding this report.

OR.........if there has been a change, or incident - report it here

ROBBERY

Robbery and burglary alarms have been installed in each location necessary to meet or surpass industry standards

CASH LIMITS

Cash limits have been set for each banking facility and at each teller?s station by senior management. There have been ..........no.........or number..............of violations of these limits since the last report to the Board. Corrective action has...................not been necessary..........or..............has been taken.
ETC.

It is not necessary to provide the Board details, such as opening procedure all-clear signals, or the amount of cash limits. They should be in YOUR files, but not in the Board Report.

Your last page of your report to the Board, after it is signed and dated by you, should also contain a statement, such as:

This is to certify that the preceding security report was presented by ..........your name............to the Board of Directors of the ...........name of your institution.....................at its regularly scheduled meeting on the ............day of .................., 200_

[This message has been edited by Barb Hurst (edited 12-17-2001).]