Consider the existing physical security measures at your bank. Does it employ proactive strategies, or is it reactionary to an event? Is it driven by edicts from regulators? Is it sufficient?