Branches are among the oldest users of video surveillance and among the most likely to be running a system designed for a business that no longer exists. Cash handling still matters, but the risks that have grown are dispute resolution, ATM and lobby incidents, and the physical protection of systems holding customer information.
The problem in this industry
Money changes hands in public. OSHA lists "exchanging money with the public" first among the factors that increase the risk of workplace violence, alongside working alone or in isolated areas and working late at night. A branch, a drive-through lane and an ATM vestibule fit all three at different hours.
Physical safeguards are part of an information security program. The FTC Safeguards Rule defines an information security program as "the administrative, technical, or physical safeguards you use to access, collect, distribute, process, protect, store, use, transmit, dispose of, or otherwise handle customer information." Physical safeguards are named in the definition, not implied by it. Controlling and monitoring who reaches the rooms where customer information lives is squarely within scope.
Disputes are frequent and expensive. Transactions contested at a counter or an ATM, allegations about what a member of staff did or did not do, and slip and fall claims in a lobby. Each is settled or defended largely by footage, and each fails when retention is too short or the image does not identify.
Estates are inconsistent. Branches acquired over years, each with a different recorder and a different retention period, and no single view of what any of them holds.
How the capability applies
- Specify by transaction point. Teller positions, ATMs, night deposit, vault and safe deposit access, and every public entrance. Each needs identification quality footage at a stated distance, which is a lens and placement decision rather than a resolution number.
- Set retention against dispute timelines, not storage cost. If chargebacks and complaints commonly arrive at 60 or 90 days, retention shorter than that produces a system that fails precisely when it is asked. NIST treats the retention period as an organizational decision, which means the organization has to make it deliberately.
- Cover the rooms, not only the money. Server rooms, comms cabinets and records storage are where customer information sits. Pair those doors with access control so the badge log and the footage answer the question together. See video surveillance and access control.
- Standardize across the estate. One platform, one retention policy, one set of user roles across branches. The alternative is an estate where every incident begins by working out what that branch has.
- Protect the system as you would any other. Segmented network, unique credentials, current firmware, no recorder exposed to the internet, and export permissions separated from viewing. A surveillance system inside a financial institution is an information system.
- Get footage out quickly. Most branch systems are judged on how long it takes to produce a clip for a dispute. Test that path before you need it.
What changes
Disputes close faster and more often in your favor. A clip retrieved in an hour, at a quality that identifies, changes the outcome and the cost of a claim.
Physical access to customer information becomes demonstrable. When an examiner asks how access to systems holding customer information is controlled, the answer is a documented control with a record behind it.
Staff safety measures become visible. Coverage at the points OSHA identifies as risk factors is a concrete answer to a question staff frequently raise, particularly around opening, closing and lone working.
Estate management becomes possible. One platform means you can answer what every branch holds, which cameras have failed and who has access, without visiting.
LABUSA works with banks and financial services firms on branch and estate-wide systems. See our banking and financial services industry page, or request a free site security assessment. For the technical questions to put to a supplier, see video surveillance security and risk, for comparing proposals the buyer checklist, and for what we install our video surveillance solutions.
Sources
- Occupational Safety and Health Administration, Workplace Violence. Establishes the quoted risk factors, including exchanging money with the public, working alone or in isolated areas and working late at night. osha.gov. Accessed 18 August 2026.
- Electronic Code of Federal Regulations, 16 CFR 314, Standards for Safeguarding Customer Information. Establishes the quoted definition of an information security program as including physical safeguards used to handle customer information. ecfr.gov. Accessed 18 August 2026.
- National Institute of Standards and Technology, SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations. Establishes that video retention periods are organization-defined, the basis for setting retention against dispute timelines. nvlpubs.nist.gov. Accessed 18 August 2026.