Description

A focused course, tailored for you

The Retail Bank Physical Security Specialist Playbook

Run branch protection, ATM response, executive travel and vendor access on one operating model with templates and a hand-built playbook.

Branch alarms, ATM attacks, executive travel, contract guards, vendor escort logs and CCTV retention sit in four different systems with four different owners and one Physical Security Specialist who is asked for one consolidated answer when the regulator, the internal auditor, or the General Counsel calls.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

A bank Physical Security Specialist owns a perimeter that looks small on the org chart and very wide in practice. Branch openings and closings, ATM lobby incidents, after-hours alarm resets, contract guard performance, badge and biometric access exceptions, CCTV retention and pull requests, vendor escort logs, executive and board-member travel risk, workplace-violence triage, active-assailant drill records, and the threat-assessment file each show up as a separate stream of evidence. When the regulator asks for the incident log, when the internal auditor asks for the camera retention window, when the General Counsel asks who was inside the building during a specific hour, the Specialist is expected to produce a single coherent picture from systems that were never wired together. The friction is not the cameras or the badges. The friction is the absence of one written operating model that turns those streams into auditable artefacts a Physical Security function can hand to anyone who asks.

What you walk away with

Produce a consolidated branch and ATM incident log a regulator will accept without follow-up questions.
Run contract guard performance reviews against a written scorecard the procurement team also signs off.
Own the CCTV retention SOP and the pull-request log so legal hold requests land on a defensible process.
Stand up an executive and board-member travel risk brief that the General Counsel and Chief Security Officer both reference.
Run workplace-violence triage and active-assailant drill records on artefacts the Human Resources and General Counsel functions trust.

The 12 modules

Module 1. The Bank Physical Security Operating Model on One Page

Maps every stream a bank Physical Security Specialist owns onto one operating model: branch and ATM incident response, contract guard oversight, badge and biometric access, CCTV retention, vendor escort, executive protection, workplace-violence triage, threat assessment, drill records. Names the artefact, the system of record, and the owner for each. The deliverable is a written one-page operating model that gets posted at the function's intake page so partners stop asking which inbox a request belongs in.

Module 2. Branch Incident Classification and Logging

Builds the branch incident classification matrix every Physical Security function needs and few have written down. Alarm activation categories, robbery and attempted robbery codes, customer-on-customer events, threats against staff, after-hours intrusion, lobby disturbance, and the criteria that decide which event escalates to General Counsel, which to the regulator notification queue, and which closes out at the branch. The matrix ships with a Word template and a categorisation cheat sheet for branch managers to keep at the teller line.

Module 3. ATM Skim, Attack and Lobby Incident Response

The ATM is the bank's most attacked physical asset. The module walks through the runbook for skimmer detection, jackpotting and physical attack response, vestibule lockdown procedure, lobby assault and bystander injury workflows, evidence preservation for law enforcement, and the post-incident remediation log. Builds the ATM incident response runbook the function can hand to the ATM operations vendor and the network operations centre as the canonical document for everyone touching the fleet.

Module 4. Contract Guard Performance and the Procurement Scorecard

Contract guards are usually the largest single line item in a Physical Security budget and the most variable in quality. The module builds the guard performance scorecard a Physical Security Specialist owns jointly with procurement: post coverage, post abandonment incidents, training currency, uniform and weapons compliance, response time to alarms, customer interaction complaints, and renewal recommendation logic. Ships with a procurement scorecard template and a quarterly business review deck the vendor walks into prepared to discuss.

Module 5. Badge, Biometric and Access Exception Handling

The bank's badge system is the audit trail every internal auditor opens first. The module covers access tier design for branch, regional office, executive floor, vault, and IT room access, the exception workflow for visiting employees and contractors, the deactivation SLA on termination, biometric enrolment and dispute handling, and the quarterly access recertification cycle. Builds the access exception log the internal audit function pulls during the annual physical security review.

Module 6. CCTV Pull Requests, Retention SOP and Legal Hold

Camera footage is requested by branch managers, by fraud, by the regulator, by internal investigators, by General Counsel, and increasingly by civil litigants. The module builds the CCTV pull-request log that captures who asked, when, for what footage, why, and what was produced. Sets the retention SOP that aligns with the bank's record retention policy and the litigation hold workflow that overrides routine deletion. Ships with the pull-request form, the retention SOP template, and the legal hold trigger checklist.

Module 7. Vendor Escort, Visitor Sign-In and Construction Site Access

Vendors and construction crews enter bank premises for ATM service, HVAC work, branch refurbishment, technology refresh, and security system maintenance. The module builds the vendor escort policy, the visitor sign-in workflow at branch and corporate sites, the construction site access control plan, the after-hours work authorisation log, and the badge issuance audit. Ships with the visitor log template, the construction access plan, and the after-hours work authorisation form.

Module 8. Executive and Board-Member Travel Risk Brief

Senior executives and board members travel for investor meetings, conferences, regulatory hearings, and customer visits. The Physical Security function is expected to produce a travel risk brief without the executive feeling watched. The module builds the destination risk assessment, the ground transport and accommodation vetting, the executive protection coordination for higher-risk destinations, the duress communication plan, and the post-trip after-action log. Ships with the travel risk brief template and the destination risk scoring sheet.

Module 9. Workplace-Violence Threat Triage and HR Coordination

Workplace-violence threats arrive through Human Resources, manager escalations, anonymous hotline reports, and customer-facing staff. The module builds the threat triage form the Physical Security function uses jointly with Human Resources and the Employee Assistance Program. Covers threat assessment scoring, behavioural indicators that drive escalation, the protective order and trespass workflow, communication with the affected employee's manager, and the post-incident review log. Ships with the triage form and the threat assessment scoring sheet.

Module 10. Active-Assailant Drills, Branch Lockdown and Tabletop Records

Drill records are the evidence regulators and insurers ask for. The module builds the annual active-assailant drill plan for branches and corporate sites, the lockdown procedure cards posted in break rooms, the tabletop exercise scenarios run with branch managers and corporate facility teams, the after-action report template, and the lessons-learned log that feeds the next year's plan. Ships with the drill plan template, the lockdown procedure card, and the after-action report format.

Module 11. The Threat Assessment File and Intelligence Intake

Physical Security functions are increasingly asked about threats to the bank's brand, social media chatter targeting executives, protest activity near branches, and credible threats from terminated employees or aggrieved customers. The module builds the threat assessment file the function maintains, the intake workflow from open sources and law enforcement liaison, the monthly threat brief delivered to the Chief Security Officer, and the escalation path to General Counsel. Ships with the brief template and intake log.

Module 12. The Regulator and Internal Audit Walk-Through

Closes the course with the artefact set a Physical Security Specialist puts on the table during a regulatory examination or internal audit walk-through. The incident log, the ATM runbook, the guard scorecard, the access exception log, the CCTV pull and retention SOP, the vendor and visitor logs, the travel risk brief, the workplace-violence records, the drill plan, the threat assessment file. Builds the walk-through binder so the conversation runs on the function's terms.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

A regulator asks for the branch incident log covering the last twelve months and you produce a consolidated, classified, owner-tagged log instead of pulling exports from four systems.

An ATM is physically attacked at 4 am and the response runs against a written runbook the ATM operations vendor, network operations centre, and local law enforcement all already know.

A board member travels to a higher-risk destination for an investor meeting and the General Counsel reviews a travel risk brief that was produced from a template, not improvised on a Friday afternoon.

Internal audit opens the access exception log and finds quarterly recertification evidence on every record, not a backlog the Physical Security function has been meaning to clean up.

What you get with this course

Twelve written modules, downloadable templates and worked examples for every module.
The hand-built implementation playbook tuned to your branch count, ATM fleet, and executive-protection scope, delivered alongside course access.
Branch incident classification matrix, ATM incident response runbook, contract guard scorecard, access exception log format.
CCTV pull-request log, retention SOP, legal hold trigger checklist.
Visitor sign-in template, vendor escort policy, after-hours work authorisation form.
Executive travel risk brief template, destination risk scoring sheet.
Workplace-violence triage form, threat assessment scoring sheet, active-assailant drill plan and after-action report templates.
Threat assessment file template, monthly threat brief format, regulator and internal audit walk-through binder layout.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours, learning environment access is provisioned and the hand-built implementation playbook is delivered alongside it.

Week one, the bank Physical Security operating model on one page and the branch incident classification matrix in production.

Weeks two and three, the ATM runbook, contract guard scorecard, and access exception log live with sign-off from procurement and internal audit.

Weeks four and five, CCTV retention SOP, pull-request log, vendor escort and visitor sign-in workflows in production.

Weeks six through eight, executive travel risk brief, workplace-violence triage, drill records and threat assessment file all on the canonical templates.

Week nine, regulator and internal audit walk-through binder rehearsed with a tabletop run.

Before and after

Before

Branch incidents, ATM attacks, guard performance, access exceptions, CCTV pulls, vendor logs, executive travel and threat intake live in four different systems with four different owners. When a regulator, an internal auditor, or the General Counsel asks for a single consolidated picture, the Physical Security Specialist spends two days assembling it from email threads and spreadsheets.

After

Every stream the Physical Security function owns runs against a written artefact. The branch incident log, the ATM runbook, the guard scorecard, the access exception log, the CCTV pull log, the vendor escort log, the travel risk brief, the workplace-violence triage form, the drill records, the threat assessment file. Any consolidated answer the function is asked for is one folder away.

What happens if you do not address this

Without one written operating model the Physical Security function lives in reactive mode. Each new request from a regulator, an auditor, or the General Counsel pulls the Specialist off the next incident to assemble evidence from scratch. The work compounds, the artefacts go missing, and the next examination opens on weaker ground than the last one closed on.

Who it is for

Bank Physical Security Specialist or Analyst inside a US retail and commercial bank. Owns or supports branch security operations, ATM lobby and vestibule incident response, contract guard oversight, badge and access control exception handling, CCTV pull requests and retention, vendor escort policy, executive and board-member protection logistics, workplace-violence triage, and the threat-assessment file the function is asked for during regulatory and internal audit reviews.

Who this is NOT for. Not for IT cybersecurity analysts whose work sits in SOC tooling and EDR. Not for fraud investigators whose work sits in transaction analytics. Not for branch managers running daily operations. The course is built for the person inside a bank whose remit is the physical perimeter, the people in it, and the evidence trail it leaves.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Roughly four hours per module across twelve modules, plus template adaptation time inside your own branch network and corporate sites. Most Physical Security Specialists complete the written course in six to nine weeks while running their day job.

Why $199 is the right number

Industry conference sessions cover individual topics like ATM attacks or workplace violence in isolation. Vendor white papers cover the product the vendor sells. Generic corporate security certifications cover the body of knowledge without the bank-specific artefact set a Physical Security Specialist is actually asked for. This course is the artefact set for the role, written for a bank Physical Security Specialist, with the hand-built implementation playbook tuned to your environment.

FAQ

Does this cover both branch network and corporate site physical security?

Yes. Branches and ATM lobbies are the largest surface area, but every module also covers corporate office and executive floor application, including badge tiering for executive floors, after-hours corporate site access, and corporate-side workplace-violence triage.

Is the course aligned to a specific regulatory standard?

It is built to the artefacts a bank Physical Security function is asked for during US regulatory examinations and internal audit reviews. It is not a certification preparation course. It is the operating-model course the certifications assume you already have.

What does the hand-built implementation playbook actually contain?

A version of every template in the course, populated against your branch count, ATM fleet size, contract guard footprint, and executive-protection scope. Plus a rollout sequence that orders the artefacts so the work compounds rather than stacking.

How fast can I show internal audit something different?

The operating model on one page and the incident classification matrix are typically in production inside two weeks. Internal audit notices the change at the next quarterly review.

Is there a refund policy?

Thirty-day money-back if the course and the implementation playbook are not what was described.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.