Agree with JJ. it has to be defined before you can come up with policies or procedures.
Additionally, generally e-mails and text messages are not secure. I would be concerned how those are used by the bank employees, especially on personal cell phones. (Bank computers are fairly secure, have anti-virus, malware protection, etc. Personal cell phones rarely have anti-virus, and in many cases, people take advantage of hot zones for communicating.)
_________________________
Integrity. With it, nothing else matters. Without it, nothing else matters.