47-Branch IP CCTV Upgrade Achieving Bangladesh Bank ICT Guideline v4.0 Compliance

Bangladesh Bank's ICT Security Guideline v4.0 imposed specific, enforceable requirements on all scheduled banks regarding CCTV infrastructure: minimum 1080p resolution for teller counter cameras, 90-day continuous video retention, remote monitoring access from a designated head office location, and camera coverage of all critical zones including vault entry, cash counter, ATM vestibule, and server room. The bank's existing analog CCTV infrastructure, installed between 2011 and 2017, met none of these standards.

A Bangladesh Bank inspection team visited four branches in Q3 2025 and issued a formal advisory letter citing inadequate surveillance infrastructure. The footage reviewed by inspectors was 480i resolution — insufficient for facial identification — and storage at most branches was configured for 30-day overwrite cycles at best. Several branches were found to have DVRs with failed hard drives that had not been replaced, meaning weeks of footage were simply missing. The advisory gave the bank 180 days to demonstrate remediation progress or face escalating supervisory actions.

Operationally, the bank's security team had no way to remotely view live or recorded footage from any branch. Investigating fraud allegations, teller disputes, or robbery incidents required physically dispatching a security officer to the branch to retrieve a USB copy of footage — a process that could take 48 to 72 hours. In two fraud investigation cases during 2024, by the time investigators arrived at the branch, the relevant DVR hard drive had already been overwritten. This operational gap had real financial and legal consequences.

At the branch level, camera placement had never been systematically reviewed after initial installation. An internal audit found that teller counter blind spots existed at 31 of 47 branches, vault entry corridors were uncovered at 19 branches, and ATM vestibule cameras had failed entirely at 9 branches with no replacement. The average branch had 12 functioning cameras — less than half what modern surveillance standards recommended for the layout and transaction volume these branches handled.

SSAL deployed a fully IP-based surveillance infrastructure across all 47 branches, replacing every analog camera, DVR, and coaxial cable run.

Camera Hardware: 1,128 Hikvision AcuSense 4MP fixed-dome cameras (model DS-2CD2143G2-I) were deployed at an average of 24 cameras per branch, calibrated based on branch floor plans. Each camera features H.265+ compression, IR illumination to 40 metres, IK10 vandal resistance, and AcuSense false-alarm filtering. Teller counter cameras were positioned to achieve full facial capture at the counter distance, per Bangladesh Bank's facial identification standard. Additional 8MP cameras (DS-2CD2083G2-I) were specified at vault entry points at all 47 branches and ATM vestibules, providing enhanced resolution for the highest-risk zones.

Storage — NVR and Retention: Each branch received a Hikvision DS-9664NI-I16 64-channel NVR configured with 8TB usable storage in RAID 1 configuration, delivering 90-day continuous recording at all cameras at 4MP/15fps. RAID 1 mirroring was specified specifically to protect against the hard drive failure scenarios that had compromised previous investigations. NVRs are rack-mounted in a locked server cabinet at each branch, powered through an APC Smart-UPS 1500VA to ensure recording continuity during power outages — a frequent occurrence in secondary city branches.

Network Infrastructure: All 47 branches received new structured cabling installations using Cat6A U/UTP cable (Commscope), replacing legacy coaxial cable runs. Hikvision PoE+ switches (DS-3E0552P-E, 48-port) power cameras without separate power supplies, simplifying installation and reducing points of failure. Each branch connects to bank headquarters via the bank's existing MPLS network, with CCTV traffic on a dedicated VLAN (VLAN 200) to prevent surveillance traffic from competing with core banking application traffic.

Central Video Management: Bosch BVMS (Building Video Management System) Enterprise edition was deployed at the bank's headquarters security operations centre, providing a unified view of all 1,128 cameras across all 47 branches. The BVMS interface allows the bank's centralized security team to view live streams from any camera at any branch, retrieve recorded footage by branch, camera, and time range, and run automated compliance reports showing camera uptime and storage health. BVMS's health monitoring module sends automated alerts when any camera goes offline or when storage falls below defined thresholds — preventing recurrence of the undetected DVR failures that had previously cost the bank evidence in fraud investigations.

Compliance Reporting: SSAL configured automated monthly compliance reports within BVMS, exportable in PDF format, showing per-branch camera status, recording continuity for the trailing 90 days, and any exceptions. These reports are formatted to address the specific evidence requirements of Bangladesh Bank supervisory examinations.