12 C.F.R. § 21.3
(a) Contents of security program. The security program shall:
(2) Establish procedures that will assist in identifying persons committing crimes against the institution and that will preserve evidence that may aid in their identification or conviction; such procedures may include, but are not limited to:
(b) Security devices. Each national bank shall have, at a minimum, the following security devices:
(5) Such other devices as the security officer determines to be appropriate, taking into consideration: