Bank opening and closing procedures: a practical guide

The quietest minutes of a branch's day are also its most exposed. At opening and closing there are only one or two people on site, the doors are about to be unlocked or locked, and the vault is in play. Good bank opening and closing procedures make those minutes boring, and they make them the same at every branch. Here's what the rules ask for, how a safe opening and closing should actually run, and where most procedures quietly fall short.

Bank opening and closing procedures: what the rules require

If you're a bank or a savings association, your regulator's rule under the Bank Protection Act says your written security program has to "establish procedures for opening and closing for business." The OCC, the Federal Reserve and the FDIC all use that same phrase. They pair it with a named security officer, initial and periodic staff training, and a report to the board at least once a year. You can read the OCC's version in 12 CFR Part 21.

Credit unions work a little differently. NCUA Part 748 asks for a written program that protects each office from robbery, burglary and larceny, and the president certifies compliance every year. It never uses the words "opening and closing," but it's hard to protect a branch from robbery without them.

None of these rules tell you how to open a branch. That part is yours to write.

Two people, two different jobs

Almost every solid opening procedure starts with one rule: nobody does it alone. One employee goes inside and checks the building. The other stays outside as the observer, somewhere they can see the all-clear but can't easily be seen from the door.

The observer's job sounds simple, and it's the one people get wrong. If the all-clear doesn't come within the agreed time, they don't go in to check. They leave the area and call the police and a supervisor, following your emergency plan.

A safe opening, step by step

1. Arrive at the agreed time. Park away from the entrance and don't sit in the car in the lot.
2. Walk the outside together: doors, windows, the ATM and the night drop. Look for anything out of place, including someone waiting nearby.
3. The observer moves to a spot where they can see the all-clear without being obvious.
4. The entry employee goes in, relocks the door, and checks the restrooms, offices, closets, break room and vault area.
5. If everything is normal, the entry employee gives the all-clear inside the agreed window.
6. The observer comes in only after seeing it, and the door stays locked until opening time.
7. Anyone arriving later waits outside until someone inside confirms it's safe.

A safe closing

Closing gets less attention than opening, but the risks are much the same. Walk the whole branch before you lock up so you know no customer or visitor is still inside. Secure cash, the vault and sensitive documents under your dual control rules. Then check the lot from inside before anyone steps out, and leave together. Nobody should be the last one walking to the car alone. Finally, let a supervisor or headquarters know the closing is done so someone knows everyone got out.

Why the blinds in the window aren't enough

A lot of branches still signal the all-clear with something visible, like a blind raised, a sign in the window or a particular light turned on. It works until somebody is watching. Anyone who studies the branch for a week can learn the signal, an employee with a weapon at their back can be made to give it, and nothing records when it happened. We covered this in more detail in why visual all-clear signals fail.

Moving the all-clear to a phone fixes most of that. With SafeSignal, which runs inside the SafeStatus app, the entry employee starts a timer before going in and taps All-Clear once the branch checks out. If the timer runs out first, a help request goes out automatically with their location, and every procedure is logged by branch and by employee.

Duress codes that look normal

A duress code is for the moment someone is being watched. It lets an employee look like they're doing exactly what they've been told while quietly asking for help. In SafeSignal, entering the duress code clears the screen and shows a normal all-clear, while headquarters and others get an alert right away.

A few things keep duress codes useful. They should be easy to remember under stress, they should look exactly like a normal clear to anyone standing nearby, and they should change on a schedule and whenever someone who knew them leaves. A timer alone only raises the alarm when it runs out, so it's worth knowing how many minutes that leaves uncovered. We worked through that gap in does your branch all-clear measure up.

Know who's already inside

IT staff, cleaning crews and maintenance techs sometimes have a good reason to be in a branch outside business hours. If the person opening doesn't know they're there, a routine walk-through can turn into a frightening surprise for everyone. Your procedure should tell the opener who is already in the building, and why, before they unlock the door. SafeSignal does this with a check-in, so the opener also sees any recent perimeter checks and issues people have reported.

What to do this week

• Pull your written opening and closing procedure and compare it to what branches actually do each morning.
• Ask a few branch managers how the all-clear is given today, and whether their observers know to stay out if it doesn't come.
• Find out when your duress code last changed, and who still knows it.
• Decide how after-hours staff let the branch know they're inside.
• Put your procedure on a one-page checklist and walk one branch through a full opening as a drill.

If you'd like to see how this runs across many branches at once, our financial institution page shows how banks and credit unions use Castatus.