*A propped service door weakens the controls a bank's security program relies on. See what the Bank Protection Act asks and what door monitoring can show.*
The Propped Door Problem in Bank Branches
Bank branches are designed for customer trust. Open lobbies, glass walls, welcoming entrances. Behind that public face, every branch has service entrances, employee-only doors, vault corridors, and ATM vestibules that require controlled access.
In practice, these doors get propped open.
Employees prop service entrances for deliveries. Cleaning crews wedge doors during after-hours work. Maintenance contractors leave employee doors ajar for equipment access. Each propped door eliminates the physical barrier that prevents unauthorized access to areas containing cash, cardholder data, and safety infrastructure.
Tailgating means following an authorized person through a controlled door without presenting credentials. A propped door removes even that step: no one has to follow anyone. The door is simply open.
An unauthorized individual observing a propped service entrance can walk directly into employee areas, storage rooms, or corridors leading to the vault.
Key facts: Tailgating means following an authorized person through a controlled door. A propped door removes even that step.
What the Bank Protection Act Requires of a Branch Security Program
The Bank Protection Act's rules require a written security program, administered by a security officer the board designates, that includes at a minimum an alarm or other device for notifying law enforcement of a robbery or burglary. One propped door can weaken that program, which is why door status is an evidence problem as much as a security problem. If a door leads into an area that handles payment card data, ask your PCI DSS assessor what the standard requires for that door.
Bank Protection Act: what your regulator actually requires
The Bank Protection Act is implemented by four parallel rules, and the one that applies depends on your supervisor: 12 CFR Part 326 (FDIC-supervised state nonmember banks and savings associations), 12 CFR 208.61 (Federal Reserve state member banks), 12 CFR Part 21, Subpart A (OCC, national banks) and 12 CFR Part 168 (OCC, federal savings associations). The wording differs; the obligations are materially the same. Federally insured credit unions follow a different rule, the NCUA's 12 CFR 748.0, which requires a written security program but lists no minimum devices.
What the rule requires:
- A written security program approved by the board of directors.
- A designated security officer responsible for administering it.
- At a minimum, an alarm system or other appropriate device for promptly notifying law enforcement of a robbery or burglary, plus any other devices the security officer finds appropriate after weighing local crime, the cash exposed, the distance to law enforcement, cost, other security measures and the building itself.
- Proper installation, maintenance, testing, and operation of those devices.
- A report to the board at least once a year on the program's implementation, administration and effectiveness.
What it means for a door: the rule sets a risk-appropriate baseline rather than mandating a specific device on every opening. It does not name door monitoring. What it does require is that whatever controls you select actually work, are maintained, and can be reported on annually. A perimeter door that is routinely propped is a control the security officer cannot honestly report as effective.
What the program covers: the written program, the security officer designation, the selection, testing, operation and maintenance of security devices, and the security officer's report to the board.
This is the practical reason branch door status matters more than it looks. A propped door can weaken the security program the Bank Protection Act asks you to report on. If it is a door into an area that handles payment card data, or a fire door, ask your PCI DSS assessor or your fire marshal what applies to it.
Key facts: The Bank Protection Act is implemented through 12 CFR Part 326 (FDIC), 12 CFR 208.61 (Federal Reserve) and 12 CFR Parts 21 and 168 (OCC), each requiring a written security program, a designated security officer, at a minimum an alarm system or other appropriate device for notifying law enforcement, and an annual report to the board.
Examinations and the Door Record
Federal law requires a full-scope, on-site examination of each FDIC-insured bank at least once every 12 months, or every 18 months for smaller banks that meet the statute's conditions (12 U.S.C. 1820(d)).
Each examination evaluates whether your physical access controls actually function — not just whether they exist on paper.
A door monitoring system that logs every door event (open, close, held open, forced) with a timestamp gives the security officer a record of how doors were actually used. No rule quoted here requires door logs, and a log does not replace the inspections and reports the rules do require.
The question is not whether the bank has access control. The question is whether that access control leaves a record of how it was used.
Key facts: Federal law requires a full-scope, on-site examination of each FDIC-insured bank at least once every 12 months, or every 18 months for smaller banks that meet the statute's conditions (12 U.S.C. 1820(d)). A door monitoring system keeps a timestamped record of every door event. No rule quoted here requires door logs.
How Wireless Door Monitoring Works in a Bank Branch
A wireless door monitoring system uses sensors mounted on each controlled door — service entrances, vault corridors and employee-only doors.
Each sensor detects three event types:
- Door opened normally. Logged with a timestamp. No held-open alert if it closes within the hold time; a door can also be set to alert on every opening.
- Door held open past the limit you set for that door. Alert sent to the people you choose.
- Door forced open without authorization. Immediate alert with door ID and location.
When a door is held open or forced, the system alerts the people you choose for that door. Sensors report to anchors in the building, and alerts leave through the system's own cellular gateway; nothing connects to the branch's Wi-Fi or IT network. You also choose who receives equipment fault and offline notices.
Every event — normal, held, or forced — generates a timestamped log entry. That gives the bank a record of how each monitored door was used.
You set how long each door may stay open before it alerts: an opening that ends within that time does not send a held-open alert. Authorized staff can pause a door's alerts for a delivery, and alerts resume on their own.
Key facts: Door sensors detect three event types: normal open, held open, and forced open. Alerts go to the people you choose for each door. Nothing connects to the branch's Wi-Fi or IT network.
Why Banks Need Panic Buttons and Door Monitoring on One Dashboard
When door monitoring and panic buttons operate on the same platform, branch security sees a single dashboard showing both perimeter status and staff duress alerts.
When a teller sends a silent duress alert, security sees on the same dashboard which monitored doors are open and which are closed. A door sensor does not show whether a door is latched or locked, so staff still check the door hardware.
The combination puts door alerts and duress alerts in one place, so security does not have to check two systems during an incident.
If your bank has already deployed wearable panic buttons for tellers, door monitoring runs on the same network and the same dashboard, with no second vendor.
Key facts: One dashboard shows door alerts and staff duress alerts together. Door sensors show whether a door is open or closed, not whether it is locked.
What to Look for in a Bank Door Monitoring System
Not every door monitoring product is designed for the compliance requirements that financial institutions face. When evaluating systems, focus on these criteria:
- Door event records. The system should keep a timestamped record of every door event.
- Records for the annual report. The security officer reports to the board at least once a year on how the program is working; door records can be part of what that report draws on.
- Separate rules for fire doors. The system should let you set stricter alert rules for fire doors than for ordinary access doors.
- False alarm management. A hold time set door by door means an opening that ends within it does not send a held-open alert.
- Multi-branch central monitoring. Regional and national banks need a single view of door status across all branches — not per-branch silos.
- Integration with existing access control. The system should complement badge readers and mantrap vestibules, not require replacing them.
Key facts: An opening that ends within the hold time does not send a held-open alert.
How Positive Proof Addresses Bank Door Monitoring
Positive Proof's door monitoring system operates on a facility-deployed network — the same independent wireless network that powers its wearable panic buttons. Branch security manages both systems from a single unified dashboard.
Every door event is logged with the door, the event type and the time. The bank decides how those records fit its security program; no rule quoted here names door logs.
Sensors fit doors with a latch, such as vault corridor, service and employee-only doors, and nothing connects to the branch's IT network. Combined with Positive Proof's panic buttons, door alerts and duress alerts come from one provider on one dashboard.
One dashboard. One vendor. One record of door events and duress alerts.
Key facts: Positive Proof's door monitoring operates on the same facility-deployed network as its wearable panic buttons. Every door event is logged with a timestamp. The unified dashboard manages both door monitoring and panic buttons from a single interface.
Frequently Asked Questions
Does the Bank Protection Act require door monitoring systems?
The Bank Protection Act does not name door monitoring. It is implemented through 12 CFR Part 326 (FDIC), 12 CFR 208.61 (Federal Reserve), and 12 CFR Parts 21 and 168 (OCC). Each requires a written security program, a designated security officer, at a minimum an alarm system or other appropriate device for notifying law enforcement of a robbery or burglary, and a report to the board at least once a year on how the program is working. Door event records are one input the security officer can use for that report.
What are PCI DSS physical security requirements for bank branches?
PCI DSS is the payment card industry's data security standard: a baseline of technical and operational requirements designed to protect payment account data. If a door leads into an area that handles payment card data, ask your PCI DSS assessor what the standard requires for that door.
How does propped door detection work in a bank branch?
Wireless sensors mounted on controlled doors detect three event types: normal open, door held open beyond a configurable threshold, and door forced open without authorization. Alerts go to the people you choose for each door, and every event is logged with a timestamp.
Can door monitoring and panic buttons run on the same system?
Yes. A unified platform displays both door status and staff duress alerts on one dashboard. During a panic event, security sees which doors are open or closed. A door sensor does not show whether a door is locked. Having both kinds of alert on one dashboard means security does not have to check two systems.
Which reviews look at door controls in a bank branch?
The Bank Protection Act's rules do not name door monitoring. For what a PCI DSS assessment or a fire inspection looks at, ask your PCI DSS assessor or your fire marshal. A door record does not satisfy any review on its own.
Take the Next Step
Request a walkthrough of Positive Proof's door monitoring and panic button platform for your bank or credit union. See door alerts and staff duress alerts on one dashboard, on a network that does not touch your branch IT.
