ATMS AND PHYSICAL SECURITY
Introduction
India is in the process of a transformation from an agriculture-based society to a modern multidimensional economy. It is estimated that India will become the fourth largest economy in the world by 2020. Such transformation has several ramifications on the social structure of the society because of the widening gap between the ‘HAVES’ and “HAVE NOTS’. Fallout from these differences will be increased criminal activities which will, as days go by will become more and more sophisticated.
In the wake of deregulations in banking industry, a number of banks have come up and almost all these banks have large number ATMs established to provide best of services to their clients. While most of the possibilities of cyber/ electronic crimes are being taken care of by the banks themselves, not much attention has been given for the physical protection of ATMs. Use of brute force attacks on ATMs is on the increase globally and as the number and ferocity - of these attacks grow, the industry needs to protect not only the cash inside ATMs, but also minimize the damage to premises and, most importantly, prevent the risk of - harm to personnel.
Criminals tend to avoid areas which ensure fail safe security measures. The current practice for providing physical security to an ATM is deploying a single guard for the night at less important localities, to round the clock vigilance which means three Guards with adequate backup for leave and absence in important localities. However, this security by itself is also not fail safe as it all depends on the alertness of the guards.
A GROWING TARGET
On its own, the increased number of ATMs does not explain why they have become a point of attack for criminals. However, their placement in often less secure locations and to a lower security specification than bank-based ATMs does. For the criminal fraternity, attacks on these ‘off-premise’ machines involve limited planning and a relatively small ‘investment’. Further, the potential rewards are high with little chance of being apprehended.
A theft in these locality in addition to the bad publicity the bank will have to face, the loss also include the cash, the cost of repairing or replacing machines, damage to premises, loss of income etc. While other losses can be made up certainly the incalculable losses to the reputation of the ATM deployer will take a beating.
TYPES OF ATTACK
Physical attacks on ATMs can be divided into two categories: ‘in situ’ attacks where the ATM is not removed from the premises but attacked with tools such as car-jacks, levers and hammers where it stands; and those that involve the removal of the ATM to a different location where more time can be spent attempting to breach it.
Attacks that involve the theft of the whole ATM may be further divided into ‘ram-raids’ and ‘dig-outs’. Ram-raids involve stolen vehicles that are used to smash into the premises and then take the ATM away. This form of attack is most frequently committed against convenience ATMs in shops and other non-bank locations.
Heavier, through-the-wall ATMs in financial institutions, petrol stations, etc, are more frequently the target of dig-out attacks using construction plant such as a bucket digger to load the ATM into the pan of a heavy truck. Attacks like these have been completed in very less time.
BUSINESS VERSUS SECURITY?
When it comes to ATMs, the needs of the business and for security may compete head on. From a business perspective, an ATM should offer a low-cost, easily accessible means of delivering cash and services 24 hours a day. However, a low cost solution is not always effective from a security perspective and so could adversely impact the reputation of the business brand.
BEST PRACTICE SECURITY?
ATM security measures can be divided into three categories: first, those that provide evidence after the crime – digital TV circuits/ closed circuit TV, cameras within the ATM, access controls to the ATM and its safe that provide an audit trail. Second is by having a stronger safe to hold cash (though the safe in 90% of installed ATMs is built to a standards, it will easily be broken into by today’s sophisticated criminals and tools) and complementary features of installing the ATMs. The third group of security measures consists of deterrents - things that adversely increase the risk/reward ratio for the criminals. That is, things that increase the chances of getting caught or reduce the amount or value of cash they get away with. These include alarms intended to draw attention to the scene of the crime, and also the ability of system to acquire evidences against the crime.
There is also the possibility of ink staining the notes, but without an RBI guideline the process will not be successful. The use of Close circuit TV is also not a practical solution as an expert criminal will take the video recorder away with him, hence the solution lies in off the site recording possible through digital network cameras
Collaboration between all sectors in the ATM life cycle and law enforcement agencies or a Security Response Service provider is the key to defeating ATM crime.
THE SOLUTION
The best solution is a fine mix of man and machine combination which will in the long act as a deterrent to any criminal activity against the ATMs. This involves the following steps:
Step 1
The ATM is wired for electronic security. This will have a Control Panel, programmable Key Pad, a Seismic Sensor and a Motion Detector (optional). The ATM will also have tilt enabled network camera installed. Once the system is wired in, the control panel will be connected over the communication network to the Central Monitoring Station. The Motion Detector can be installed to pick up any movement within the ATM and when connected to the deactivation system in the main door, the detector will turn itself off when an authorized entry is made.
Step 2
In case a motion is detected or if there is any effort made to drill a hole or cut the glass and make an entry, the seismic sensor/ motion detector will get activated. The signal generated when the sensor is activated will pass through the control panel to the Central Monitoring Station where the premises are being guarded 24/7, 365 days.
Step 3
In case of a trigger, the Central Monitoring Station will immediately view the area through the pan tilt cameras and also immediately video pictures will start getting recorded. The operator will tilt the camera and start obtaining all possible evidences. In the mean time the response will also get activated and within 20 minutes uniformed professional security personnel will be at the location. All notified personnel will also be informed.
Step 4
The Police are also informed simultaneously. In due course arrest will be an automatic outcome of such criminal activities and criminals will avoid these areas.
FINANCIAL IMPLICATIONS
The cost of a complete solution will be less than Rs 5,000/- per month as against the present cost of deploying a Guard for which the Banks are paying a salary of approximately Rs 6,000/-. In the second year this will further come down to Rs 3,500/- plus AMC of the equipment whereas the expenses for the Guard will still remain at Rs 6,000/- or would be higher keeping in mind inflation and other market forces.
The solution is practical, economical and will provide round the clock security to ATMS