Bank Vault and Safe Deposit Box Audit Checklist [FREE PDF]

Bank vault and safe deposit box operations are subject to rigorous physical security standards, dual-control requirements, and regulatory oversight under federal banking guidelines and state law. The FFIEC IT Examination Handbook and interagency guidance require financial institutions to maintain comprehensive physical security programs that protect assets, ensure proper access controls, and prevent internal fraud through segregation of duties. Regular audits of vault and safe deposit box operat

  • Industry: Banking
  • Frequency: Monthly
  • Estimated Time: 45-75 minutes
  • Role: Internal Auditor
  • Total Items: 37
  • Compliance: 12 CFR Part 30 - Safety and Soundness Standards (OCC), FFIEC IT Examination Handbook - Physical and Environmental Controls, Bank Protection Act 12 U.S.C. 1882 - Security Procedures, 12 CFR Part 21.2 - Minimum Security Devices and Procedures, SOX Section 404 - Internal Controls Over Financial Reporting

Vault Physical Security & Access Controls

Inspect the physical integrity of the vault, locking mechanisms, and access control systems to ensure compliance with minimum security standards.

  • Is the vault door in proper working condition with no visible signs of damage, tampering, or mechanical defects?
  • Are all vault combination locks changed at least annually and upon separation of any authorized employee?
  • Is an up-to-date authorized access list maintained and does it match current vault access records?
  • Is the vault alarm system functional, tested monthly, and connected to a central monitoring station?
  • Are surveillance cameras operational and covering all vault entry points with recordings retained for a minimum of 90 days?
  • Is the vault area free from unauthorized items, personal belongings, or materials not consistent with banking operations?

Dual Control & Segregation of Duties

Verify that dual control procedures are consistently enforced for all vault operations to prevent internal fraud and unauthorized access.

  • Is dual control consistently enforced for all vault openings with two authorized employees present at all times?
  • Are vault opening and closing logs maintained daily with signatures of both authorized employees present?
  • Are vault access responsibilities appropriately segregated from cash counting, reconciliation, and approval functions?
  • Are exceptions to dual control procedures documented, approved by management, and reviewed for patterns?
  • Are employees with vault access prohibited from also performing reconciliation of vault cash without supervisory review?

Cash Verification & Vault Reconciliation

Confirm that vault cash is accurately counted, reconciled, and reported in accordance with internal procedures and regulatory requirements.

  • Has vault cash been independently counted and verified against the system balance at the start of today's audit?
  • Does the physical vault cash count match the system general ledger balance within acceptable variance tolerances?
  • What is the total vault cash balance verified during this audit?
  • Are all cash overages and shortages of $10 or more documented and reported to management on the same business day?
  • Is counterfeit currency detection equipment operational and used for all large cash transactions?
  • Are high-denomination currency bundles sealed, banded, and strapped in accordance with Federal Reserve standards?

Safe Deposit Box Access & Operations

Review safe deposit box procedures including access controls, dual key requirements, and lessee account management.

  • Is dual control (bank guard key plus lessee key) required and consistently enforced for all safe deposit box access?
  • Are safe deposit box access logs completed accurately for each entry including date, time, and employee signature?
  • Are lessee signature cards current, signed by all authorized signatories, and matched against government-issued identification?
  • Are overdue and delinquent safe deposit box rentals being managed per documented procedures including proper legal notice?
  • Are forced entry procedures for delinquent boxes performed with two witnesses and a complete inventory documented?

Vault Cash Limits & Overnight Controls

Verify that overnight cash limits are adhered to and that excess cash management procedures minimize loss exposure.

  • Is the current vault cash balance within the board-approved maximum overnight cash limit?
  • Are excess cash shipments to the Federal Reserve or armored courier documented with dual-custody chain-of-custody records?
  • Are vault cash insurance coverage amounts verified as adequate and current for current maximum cash limits?
  • Is the teller cash supply from the vault documented with authorized request forms and dual control during cash issuance?
  • Are mutilated or damaged currency notes segregated, logged, and processed through proper Federal Reserve redemption channels?

Robbery Prevention & Emergency Procedures

Assess robbery deterrence measures, emergency response readiness, and staff preparedness for security incidents.

  • Are silent alarm (panic button) systems tested within the past 30 days with documented test results on file?
  • Have all vault and teller staff completed robbery response training within the past 12 months?
  • Are dye packs or GPS tracking devices maintained in vault cash for robbery deterrence?
  • Is the vault area visible to a security camera with clear line-of-sight coverage and current recording verification?
  • Are time-delay locks or other secondary access controls operational on the vault for enhanced robbery deterrence?

Audit Documentation & Deficiency Reporting

Ensure audit findings are properly documented, communicated to management, and tracked through remediation.

  • Have all deficiencies identified during this audit been documented with severity ratings and specific regulatory references?
  • Were prior audit findings reviewed and verified as remediated before the start of this audit?
  • Has the branch manager acknowledged and signed acknowledgment of all findings identified in this audit?
  • Are there any findings from this audit that require immediate escalation to senior management or the audit committee?
  • Please document any additional observations, anomalies, or recommendations noted during this vault audit?

Related Financial Services Banking Checklists

Related Security Checklists

Why Use This Bank Vault and Safe Deposit Box Audit Checklist [FREE PDF]?

This bank vault and safe deposit box audit checklist [free pdf] helps banking teams maintain compliance and operational excellence. Designed for internal auditor professionals, this checklist covers 37 critical inspection points across 7 sections. Recommended frequency: monthly.

Ensures compliance with 12 CFR Part 30 - Safety and Soundness Standards (OCC), FFIEC IT Examination Handbook - Physical and Environmental Controls, Bank Protection Act 12 U.S.C. 1882 - Security Procedures, 12 CFR Part 21.2 - Minimum Security Devices and Procedures, SOX Section 404 - Internal Controls Over Financial Reporting. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Bank Vault and Safe Deposit Box Audit Checklist [FREE PDF] cover?

This checklist covers 37 inspection items across 7 sections: Vault Physical Security & Access Controls, Dual Control & Segregation of Duties, Cash Verification & Vault Reconciliation, Safe Deposit Box Access & Operations, Vault Cash Limits & Overnight Controls, Robbery Prevention & Emergency Procedures, Audit Documentation & Deficiency Reporting. It is designed for banking operations and compliance.

How often should this checklist be completed?

This checklist should be completed monthly. Each completion takes approximately 45-75 minutes.

Who should use this Bank Vault and Safe Deposit Box Audit Checklist [FREE PDF]?

This checklist is designed for Internal Auditor professionals in the banking industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists