Cash Operations Security Update
Fiscal Management and Control Board
July 11, 2016
MBTA Moved Quickly to Safeguard Employees and Secure the Money Room
Money Room Security Review outlined significant risks and weaknesses in the
revenue collection facility.
Upon learning this information, the MBTA addressed each of these risks and
took action:

Changed locks on all exterior doors

Increased security staffing levels

Revised Standard Operating Procedures and Manuals (Ongoing)

Enforced existing Security Policies

Employee Training

Changed Vault Combinations
As a result the Employees and Assets in the Money Room are now secure
Draft for Discussion & Policy Purposes Only
2
Experts Identified Unacceptable Security Risks and Weaknesses
Industry Standard
Physical Security
Based on observed
practices and an audit
conducted by MBTA
Security Office
MBTA
• Security doors bypassed, including propped open, vault
room door duct taped, alarm contacts not functional
• Vault room access unrestricted
• Non-alarmed doors
• Cameras missing or removed at guard stations
• Outside gates have locks with unaccounted for keys
• Unsecured freight elevator
• Lack of interlocking doors staggering access to the vault
Opening and Closing
Procedures
• Staff enters building without full TPD clearance of building
• Building is not fully cleared
Keys and Codes
• Lack of dual control
• Time locks not utilized
• Many individuals capable of opening vault alone, a
violation of dual custody standard
• Keys not securely managed and inventoried
Facility Access
MBTA
Employees not checked for ID or required to wear ID
Employees have access to cash floor and vault room
Generic guest key cards allow full access to the facility
Frequent vendors and outside employees allowed same
access as employees
• Vendors arrive unscheduled and gate is opened for them
•
•
•
•
Draft for Discussion & Policy Purposes Only
3
Security Weaknesses and Risks
• Doors duct taped and propped open
• License to carry firearms not
consistently checked
• Unalarmed, unmonitored exit doors
• Keys are stored without appropriate
controls
› No chain of key custody
› Keys not checked in in accordance
with SOPs
› No inventory system
› Vehicle and cashbox keys
unaccounted for
4
Significant Changes Made to Secure Facility and Protect Employees and
Assets
• Developed security enhancement plan in coordination with TPD
• Reinstituted employee and visitor screening policies, requiring all bags to be
screened by security upon entry and exit
• Locks and Vault combinations changed; reestablished dual control practices
for vault access
• Revenue agents now required to present identification and proof of license to
carry before accessing firearms
• Instituted “single door policy” ensuring no more than one door between vault
and street can be open at any given time
• New opening procedures in place. Security now clears building before
employees are admitted to secure areas
• Reinstituted employee policies on wearing uniforms
• On-site union supervisors replaced with executive managers
• Four of four top managers replaced
• Investigation continues into security lapses
5
Money Room now Secured and Operating Under Professional Supervision
Industry Standard
MBTA
Physical Security Based on
observed practices and an audit
conducted by MBTA Security
Office
• New Standard Operated Procedures for security prepared, all door
stops removed, policies enforced
• Armed security levels enhanced
• Changed all locks on non-alarmed doors
• Camera and Alarm audit in progress
• Guards placed at high risk doors
• IDs now checked upon entering building
Opening and Closing
Procedures
• Building now fully cleared according to Standard Operating
Procedures
Keys and Codes
• Vaults re-coded
• Dual custody standard enforced
• New non-replicable keys stored in vault (limited number)
Facility Access
•
•
•
•
•
Employees checked for ID
Vault room door remains closed
All guest key cards eliminated
Vendors must be accompanied by a security escort
Vendors required to check in and out of building
Draft for Discussion & Policy Purposes Only
6