9.1 Physical Custody, Vault Management, and Security Safeguards

Physical Custody, Vault Management, and Security Safeguards

Accountability and control objectives

Section 470 of Republic Act No. 7160 assigns the local treasurer custody and proper management of LGU funds and charge of their disbursement. Presidential Decree No. 1445 makes an officer whose duties permit possession or custody accountable for safekeeping and requires a proper bond. Accountability does not mean that every loss automatically proves a particular offense, but it does require documented care, prompt reporting, and proof supporting any request for relief.

Physical security should achieve four results: unauthorized access is prevented or detected; a transaction can be attributed to an identified custodian; cash and accountable forms remain protected until prompt intact deposit or authorized use; and operations can continue through a documented emergency process. Use the current Local Treasury Operations Manual, COA rules, the LGU's approved security policy, facility assessment, and insurer or depository requirements. Do not invent a universal wall thickness, safe rating, retention amount, escort count, or annual combination-change rule when the controlling source does not state one.

Assigning custody and access

Designate custodians and alternates in writing and confirm that each person is lawfully assigned and bonded for the actual accountability. Maintain an access register for the vault, safe, accountable-form store, keys, combinations, alarms, and relevant system credentials. Grant only the access needed for the assignment and remove it immediately on transfer, separation, suspension, or change of duties. A shared key or password prevents attribution and should not be normalized merely because the office is small.

Dual control is a useful safeguard for high-risk access: two authorized people participate so one cannot open, remove, and conceal assets alone. The exact design depends on the installed lock and written policy. It can involve separate keys, a key and combination, two combinations, or controlled access plus independent inventory. Dual control is not the same as shared accountability. Each custodian's role, items received, and handoff should still be recorded.

Change a combination or access secret when a knowledgeable custodian leaves the role, when compromise is known or suspected, after an emergency opening, and at any periodic interval required by the applicable approved policy. Test the new setting and document the change without recording the secret in ordinary minutes or an exposed log. Never leave a combination on a desk, send it through an unsecured message, or allow a vendor default code to remain active.

Emergency access and key management

An emergency copy can prevent paralysis, but it also creates a bypass. Place the necessary secret or duplicate key in a sealed or tamper-evident package, identify the asset and date without exposing the secret, and keep it at an authorized separate secure location under documented custody. Specify who may approve retrieval, which independent witnesses are required, how the opening is logged, and when the secret must be changed afterward. The applicable policy may name a depository facility or another approved custodian; do not assume a particular bank, wax seal, or committee composition without the controlling issuance.

Inventory keys and emergency packets periodically. A missing packet, broken seal, unexplained retrieval, or unreturned vendor key is a security incident. Preserve access logs and video or alarm records where deployed, suspend compromised access, count affected assets, notify responsible officials, and document remediation.

Cash received and overnight protection

Collections move through a controlled chain: receipt, teller count, turnover, collector report, intact deposit, bank credit, posting, and reconciliation. Deposit promptly under the governing rule and do not use receipts for petty disbursement, check encashment, or informal loans. When banking cutoff, distance, disaster, or another documented condition delays deposit, record the reason and amount, place the cash in the approved secured receptacle, segregate it by fund or accountability, and deposit at the first authorized opportunity.

The fidelity bond amount is not an approved vault-retention ceiling and does not make excess or unnecessary exposure safe. Compare cash held with authorized accountability, facility capacity, insurance conditions, and the deposit plan. Keep private money out of public receptacles. Count and sign custody transfers, and investigate differences at the handoff instead of carrying them forward.

Secure transport

Plan cash transport according to amount, route, distance, threat conditions, timing, vehicle, staff, communications, and insurance or depository requirements. Use a written custody chain and vary sensitive details on a need-to-know basis. For material risk, employ authorized security support or a qualified secure-transport arrangement as current policy requires. Do not divide cash among unrecorded carriers, use an unauthorized courier, stop for personal errands, or delay deposit merely to reduce the number of trips.

Before departure, reconcile the amount and package it so tampering is evident. Record the releasing and receiving officers, time, vehicle or service, destination, and deposit reference. After delivery, match the validated deposit or electronic bank credit to the transport record and collection report. An escort or insurance policy does not replace intact deposit and reconciliation.

Counts, incidents, and continuity

Perform documented surprise or periodic counts as required, including cash, accountable forms, keys, and access packets. The counter should be independent of daily custody. Reconcile physical items with the cashbook, form ledger, deposit records, and assigned accountability and obtain custodian acknowledgement.

For robbery, fire, disaster, forced entry, or unexplained loss, protect people first, secure the scene, notify law enforcement and the prescribed government and audit officials, preserve records and video, count remaining accountability, and avoid altering the scene or backfilling the loss. Section 73 of Presidential Decree No. 1445 ordinarily requires a relief application within thirty days, or a longer period COA permits, and relief depends on proof that the loss was not caused by fault or negligence. A police report or insurance claim supports the record but does not by itself decide audit relief.