Store Network Security Site Review

• Client / Site

• PostShop Manager

• RSSM

• Date reviewed

  Date

• Security Risk Advisor

• Document No.

• A PostShop security review has been undertaken and identified the following controls as requiring improved focus in order to mitigate risk:
  
  1)
  2)
  3)
  
  All controls are easy to remedy and information relevant to their correct implementation can be found in the Store Network Risk Handbook and on the Store Network Intranet.
  
  We would like to take this opportunity to thank the PostShop Manager and team members on site for assistance provided to us while this review was undertaken.
  
  Should you have any questions relating to the content of this review, please do not hesitate to contact us.

PHYSICAL SECURITY and ACCESS

• There is clear sight into the PostShop through windows and entrances (thought given to the placement of advertising).

  Yes

  No

  N/A

• All entrances and exits to the premises are afforded appropriate levels of security.

  Yes

  No

  N/A

• Entrance and exit points to the premises are secured at all times when not in use.

  Yes

  No

  N/A

• Doors from public spaces into the secure zone are closed and not propped open.

  Yes

  No

  N/A

• Staff are maintaining control of their allocated proximity cards and are not sharing individual alarm codes.

  Yes

  No

  N/A

• Spare 'live' proximity cards are being afforded adequate levels of security.

  Yes

  No

  N/A

• The PostShop Manager is maintaining an effective register detailing allocated proximity cards.

  Yes

  No

  N/A

• The PostShop Manager is deleting individual alarm codes and recovering proximity cards from staff who cease employment with Post.

  Yes

  No

  N/A

• Only authorised persons are granted access to the secure zone.

  Yes

  No

  N/A

• A Visitors Register is being appropriately maintained.

  Yes

  No

  N/A

CCTV

• Weekly checks are undertaken including camera functionality, date/time, and length and quality of recording.

  Yes

  No

  N/A

• The date and time is correct.

  Yes

  No

  N/A

• Camera positioning and focus is satisfactory.

  Yes

  No

  N/A

• Cameras are free from obstruction.

  Yes

  No

  N/A

• Stored history is at least four weeks.

  Yes

  No

  N/A

SAFE and CASH SECURITY

• The safe was secure at the time of the review.

  Yes

  No

  N/A

• The PostShop Manager confirmed that the safe is always secure when not in use.

  Yes

  No

  N/A

• Both the digital combination and wheel combinations are used to secure the safe overnight.

  Yes

  No

  N/A

• Digital combinations to the safe and skimmers are changed and documented six monthly, or whenever a staff member with access ceases employment.

  Yes

  No

  N/A

• Only the PostShop Manager and and appropriate number of deputies have access to the safe.

  Yes

  No

  N/A

• The key to the top safe is held on a person at all times throughout the day.

  Yes

  No

  N/A

• The key to the top safe is secured in the bottom safe overnight.

  Yes

  No

  N/A

• Bulk cash is appropriately secured in the bottom safe.

  Yes

  No

  N/A

• All foreign cash is appropriately secured in the bottom safe.

  Yes

  No

  N/A

ACCOUNTING FOR CASH

• Cashier drawers are balanced at the counter at close of day and under camera prior to being secured in the safe.

  Yes

  No

  N/A

• A daily balance of the bulk cash holdings is being undertaken on the 'Bulk Banking and Balance' form.

  Yes

  No

  N/A

• Bulk cash is counted in the cash counting area and under camera.

  Yes

  No

  N/A

• The 'Cash Discrepancy Checklist' is being used to document checks made to locate discrepancies.

  Yes

  No

  N/A

• All cash discrepancies of $100 or greater (including multiple discrepancies totalling greater than $100) are being advised to Store Network Cash cc RSSM.

  Yes

  No

  N/A

• An independent count of the bulk cash is being conducted weekly and documented on the Independent Cash Count' form.

  Yes

  No

  N/A

SKIMMING COMPLIANCE

• Through observation and discussion it was established that the PostShop was adhering to skimming requirements.

  Yes

  No

  N/A

• The PostShop Manager is monitoring teller cash holdings.

  Yes

  No

  N/A

• Skimmers are routinely cleared throughout the day.

  Yes

  No

  N/A

• Skimmers and teller cash drawers are left open after hours.

  Yes

  No

  N/A

• Rubbish bins and personal bags are located away from skimmers and cash counting areas.

  Yes

  No

  N/A

CASH TO SECURITY

• Prepared banking is secured in the bottom safe until uplifted.

  Yes

  No

  N/A

• Banking documentation is being completed accurately and in full.

  Yes

  No

  N/A

• The PostShop Manager is aware of the bulk cash threshold for the store.

  Yes

  No

  N/A

• The bulk cash threshold is being adhered to.

  Yes

  No

  N/A

• ACM guards are being identified prior to gaining access to the secure zone.

  Yes

  No

  N/A

• The cash banking bag is being sealed by a PostShop staff member under camera immediately prior to being handed over to ACM.

  Yes

  No

  N/A

• Handover of cash occurs in the secure zone and under camera.

  Yes

  No

  N/A

CONFIDENTIAL INFORMATION, SECURE STORAGE and DESTRUCTION

• All confidential customer records (including but not limited to banking and PO Box holder records) are appropriately secured in locked cabinets.

  Yes

  No

  N/A

• Confidential staff records are secured in locked cabinets accessible only by the PostShop Manager.

  Yes

  No

  N/A

• A blue secure document destruction bin is on site and is locked.

  Yes

  No

  N/A

• All confidential and sensitive information is disposed of in the blue secure document destruction bin.

  Yes

  No

  N/A

ROBBERY PROCEDURES

• The current Store Network Crime Kit is on site and easily accessible.

  Yes

  No

  N/A

• Six monthly robbery refresher training has been completed and documented for all staff.

  Yes

  No

  N/A

• Adequate security signage is prominently positioned on all customer entrances.

  Yes

  No

  N/A

SUSPICIOUS TRANSACTION REPORTING

• Six monthly STR refresher training has been competed and documented for all staff.

  Yes

  No

  N/A

• Hard copy completed STR's are securely disposed of once sent.

  Yes

  No

  N/A

OTHER OBSERVATIONS

• Detail any other observations or recent significant security incidents that may be of relevance.