Cash Operations Security Update

Transcription

1 Cash Operations Security Update Fiscal Management and Control Board July 11, 2016

2 MBTA Moved Quickly to Safeguard Employees and Secure the Money Room Money Room Security Review outlined significant risks and weaknesses in the revenue collection facility. Upon learning this information, the MBTA addressed each of these risks and took action: Changed locks on all exterior doors Increased security staffing levels Revised Standard Operating Procedures and Manuals (Ongoing) Enforced existing Security Policies Employee Training Changed Vault Combinations As a result the Employees and Assets in the Money Room are now secure Draft for Discussion & Policy Purposes Only 2

3 Experts Identified Unacceptable Security Risks and Weaknesses Industry Standard MBTA MBTA Physical Security Based on observed practices and an audit conducted by MBTA Security Office Opening and Closing Procedures Security doors bypassed, including propped open, vault room door duct taped, alarm contacts not functional Vault room access unrestricted Non-alarmed doors Cameras missing or removed at guard stations Outside gates have locks with unaccounted for keys Unsecured freight elevator Lack of interlocking doors staggering access to the vault Staff enters building without full TPD clearance of building Building is not fully cleared Keys and Codes Lack of dual control Time locks not utilized Many individuals capable of opening vault alone, a violation of dual custody standard Keys not securely managed and inventoried Facility Access Employees not checked for ID or required to wear ID Employees have access to cash floor and vault room Generic guest key cards allow full access to the facility Frequent vendors and outside employees allowed same access as employees Vendors arrive unscheduled and gate is opened for them Draft for Discussion & Policy Purposes Only 3

4 Security Weaknesses and Risks Doors duct taped and propped open License to carry firearms not consistently checked Unalarmed, unmonitored exit doors Keys are stored without appropriate controls No chain of key custody Keys not checked in in accordance with SOPs No inventory system Vehicle and cashbox keys unaccounted for 4

5 Significant Changes Made to Secure Facility and Protect Employees and Assets Developed security enhancement plan in coordination with TPD Reinstituted employee and visitor screening policies, requiring all bags to be screened by security upon entry and exit Locks and Vault combinations changed; reestablished dual control practices for vault access Revenue agents now required to present identification and proof of license to carry before accessing firearms Instituted single door policy ensuring no more than one door between vault and street can be open at any given time New opening procedures in place. Security now clears building before employees are admitted to secure areas Reinstituted employee policies on wearing uniforms On-site union supervisors replaced with executive managers Four of four top managers replaced Investigation continues into security lapses 5

6 Money Room now Secured and Operating Under Professional Supervision Industry Standard Physical Security Based on observed practices and an audit conducted by MBTA Security Office Opening and Closing Procedures MBTA New Standard Operated Procedures for security prepared, all door stops removed, policies enforced Armed security levels enhanced Changed all locks on non-alarmed doors Camera and Alarm audit in progress Guards placed at high risk doors IDs now checked upon entering building Building now fully cleared according to Standard Operating Procedures Keys and Codes Vaults re-coded Dual custody standard enforced New non-replicable keys stored in vault (limited number) Facility Access Employees checked for ID Vault room door remains closed All guest key cards eliminated Vendors must be accompanied by a security escort Vendors required to check in and out of building Draft for Discussion & Policy Purposes Only 6