Obligated establishments · Applicable regulations

Security systems for banks and financial institutions

Maximum regulatory requirements, high-grade technology, and on-site security for banking institutions.

Law 05/2014
EN 50131 certification
No-obligation audit
Sector context

Banks and financial institutions: maximum regulatory requirements and comprehensive security

Banks and financial institutions are the establishments subject to the highest level of requirements in private security under Spanish legislation. Law 5/2014 on Private Security and its implementing regulations set out a series of specific requirements for them—many of them mandatory—ranging from technical detection systems to the compulsory presence of accredited security guards.

At NPS Seguridad we provide comprehensive security solutions for banks and financial institutions, with the experience, certification, and technical capability required to deliver projects of this level of demand and complexity.

Comprehensive solution

NPS Seguridad’s comprehensive solution for banking institutions

Credit institutions, including banks and savings banks, are required to have a security department responsible for managing and structuring the protection of the entire banking or credit institution. In the event that obstacles arise in their connection,

If, due to technical impediments, this connection is not viable, for the duration of the incident the contracting of security guard services will be required.

Alarm and Detection System (Connected to an ARC)

It is mandatory to have image capture, processing, and storage devices permanently connected to an Alarm Receiving Centre (ARC) to record any criminal activity that threatens the integrity of staff, customers, or the branch’s assets.

Panic button

Push buttons or other simplified, concealed activation means, distributed throughout the operational areas of the premises to be used without suspicious movements in situations of coercion or assault.

Intrusion alarms with 24/7 ARC notification

Graphic and visual materials intended to clearly communicate the security measures in place at the establishment. They must detail the presence of a permanent image capture and recording system that continuously records activity on the premises to ensure the safety of employees and customers.

Access control and restricted areas

They must mandatorily integrate advanced access control mechanisms, including temporary locking devices and delayed automatic opening systems to prevent the immediate removal of safeguarded funds.

Likewise, when the safe weighs less than 2,000 kilograms, it must be securely anchored to the floor or perimeter walls using reinforced concrete structures, thereby preventing any attempt to remove or forcibly move the equipment.

Access control and restricted areas

The security measures required for ATMs depend on their location and must comply with the requirements established by current regulations.

  • Establishment lobby:

or Armoured door with certified security glazing and an internal locking system

or Delayed opening system for access to the cash deposit, with temporary locking and control exclusively by authorised security personnel.

or Seismic detector at the rear of the ATM to detect drilling or sabotage attempts.

  • Façades or interior perimeters of a building:

or Delayed opening of the cash compartment, with programmed locking and access restricted exclusively to authorised security personnel.

or Seismic sensor capable of detecting drilling attempts, tampering, or attacks on the ATM.

  • Inside buildings, premises, or properties:

or These security measures are waived when permanent armed protection is in place. The only requirement will be anchoring it to the wall or floor, provided its total weight is less than two thousand kilograms.

  • Open spaces:

or Terminals installed outside the building must have a cabin anchored to the ground and maintain the same level of protection as ATMs located in the institution’s lobby.

Access control and restricted areas

The security system must include automatic locking outside business hours and delayed opening during public service hours. In the case of vaults with safe deposit compartments, it is mandatory to have a 24-hour assault detection system in operation.

Emergency doors may be exempt from timing or locking systems, provided that their keys remain held in custody at a nearby branch of the same institution.

Vaults must incorporate sabotage detection sensors and volumetric detectors to ensure comprehensive protection against intrusions and attacks. The interior must be protected by a video surveillance (CCTV) system or equivalent optical devices, integrated with motion detectors or video analytics systems. Images must be sent in real time to the Alarm Receiving Centre or, failing that, there must be a key-holding service to ensure an on-site response to any incident.

Security measures in banks by population size

Establishments located in municipalities with more than 10,000 inhabitants must incorporate, at a minimum, one of the following mandatory security measures:

01

The cashier area must have an armoured enclosure at least two metres high, with internal locking and BR2 bullet-resistant protection to ensure staff safety.

02

Individualised access control via a security filter at the main entrance, equipped with a walk-through metal detector and an automatic locking system that prevents entry upon detection of dangerous objects. In addition, the installation must include safe evacuation routes and emergency release systems, ensuring people’s protection in the event of fire or another risk situation.

03

Cash dispensers or recyclers make it possible to automate cash handling, replacing traditional manual tills. If a payment point with manual cash handling is maintained, it must be located within an armoured and protected cashier enclosure.

Establishments located in municipalities with fewer than 10,000 inhabitants must comply with all general security measures required by regulations for this type of installation:

As an alternative to one of the security measures above, regulations allow the installation of an approved auxiliary safe. It must remain permanently anchored to the floor or to the building’s structural elements, meeting the resistance and approval requirements set out in the Private Security Regulations.

Establishments located in municipalities with between 10,000 and 50,000 inhabitants will be subject to an analysis of crime rates to determine the mandatory security measures, based on the levels of robberies recorded in the area over the last two years.

Why NPS Seguridad?

ISO 27001 certification in information security, essential in banking environments where confidentiality is critical

ISO 18788 certification in private security operations management

Proven experience in highly complex projects, recognised by Dahua and the Directorate-General of the Police

Integration of physical and logical security into a single management platform

Free assessment

Request a specialised consultation

The security of a financial institution requires a thorough analysis and a tailored design. Our engineering team visits the premises, assesses the applicable regulatory requirements, and prepares a detailed technical proposal.

Contact

Does your business comply with security regulations?

We will review your premises with no obligation and tell you exactly what you need to comply with the law. Free assessment and a fixed quote within 48 hours.

    Basic Information on Data Protection
    Data Controller: Napau Sistemas, S.L.
    Purpose: Management of contacts and information requests received via the website.
    Lawful Basis: Consent. Legitimate interest. Pre-contractual measures.
    Recipients: Data will not be transferred to third parties.
    Rights: Access, rectification or erasure, restriction of processing, objection to processing, and portability. The data provided will be kept for a maximum of one year.
    Additional Information: You can consult additional and detailed information on Data Protection in our Privacy Policy.