Securing dore bar casting facilities: gold room protocol standards
Dore bars are the near-pure gold and silver ingots cast directly from refinery slurry, and they sit at the most exposed point of any precious metals operation. A single compromised bar can represent millions of Australian dollars in unrecoverable loss, with reputational damage that travels well beyond the site gate. Gold room security protocols for dore bar casting facilities must therefore address physical intrusion, insider collusion, material substitution, documentation fraud, and the digital attack surface now targeting industrial control networks.
For operators in Western Australia, where the Kalgoorlie-Boulder region alone produces more than half a million ounces a year, the stakes are particularly visible. A doré bar leaving the casting furnace is typically 70–85% gold with the remainder silver and trace impurities, and the moment it solidifies it becomes a high-value, easily-portable target. Whether a mine operates near the Super Pit, runs a remote processing plant in the Pilbara, or commissions a new facility through EPC contractors, the security envelope must be designed before the first anode is poured.
This article walks through the layered controls that should sit between molten metal and the outside world, with practical guidance on access regimes, personnel screening, chain of custody, metal accounting, surveillance, and the regulatory framework that applies to Australian producers shipping doré to refineries in Perth, Melbourne, or offshore buyers.
Physical perimeter and access control
The casting area sits behind multiple defensive rings, beginning with the boundary fence and ending at the bullion safe. A robust perimeter starts with a 2.4-metre anti-climb mesh topped with razor wire, supplemented by vehicle-rated bollards at every vehicle access point. Inside that fence, the gold room itself is constructed from reinforced concrete or steel-clad walls, fitted with bullet-resistant doors on independent frames and surrounded by a clean 1.5-metre zone free of hiding places. Mantraps at the entrance let only one authorised person pass at a time, and biometric readers — typically palm-vein or multi-factor fingerprint — replace key locks entirely so lost credentials cannot be duplicated.
For Australian sites shipping doré through Perth, the access philosophy mirrors standards seen at the Perth Mint, where visitor and staff flows are strictly separated and every entry event is logged against an individual identity rather than a role. Lozova's integrated products range includes modular gold-room enclosures, biometric terminals, and reinforced vault doors engineered for remote operations, and operators specifying new builds should include time-delay locks on the casting-room door to prevent tailgating.
Personnel vetting and training standards
Technology is only as strong as the people operating it, and insider threats account for the majority of precious-metals losses globally. Every worker authorised to enter the casting area — furnace operators, pourers, samplers, security officers, and contracted cleaners — should be subject to background checks before a card is issued. In Australia, that typically means national police checks, ASIC compliance verification for financial-handling roles, and ASIO-aware screening where the role touches export-controlled material. For remote sites employing indigenous workers, cultural-awareness training is just as important as security training, because well-integrated teams report anomalies more reliably.
Onboarding is followed by structured rotation: no single operator should pour bars for more than a defined shift cycle without a counter-signing peer present. Annual refresher training covers tamper recognition, duress-alarm response, and the legal duties owed under state legislation for handling of stolen property. Refresher modules incorporate red-team scenarios — staged attempts to walk an unauthorised bar past a checkpoint or substitute a tungsten brick for a genuine doré bar — so procedures are tested under realistic pressure. A documented role matrix names who performs each critical task, and anything outside that matrix is escalated to the gold-room supervisor, who holds the only spare biometric credential and logs every override in real time.
Chain of custody and documentation
A doré bar changes hands many times between furnace and refinery, and each hand-off is a point of risk. Best practice is a single tamper-evident seal applied at demoulding, with a matching sample tag attached to the representative drill or chip used for assay. Both the bar tag and the sample tag carry a unique barcode or RFID number, and the system refuses to issue a transport waybill unless the two numbers reconcile. Dual signatures — one from the casting operator, one from the security officer — are captured on a hard-copy tally sheet and again on a hardened tablet that writes directly to the metal-accounting database.
In Australian jurisdictions, the documentation trail must satisfy DMIRS in Western Australia and its equivalents elsewhere, as well as AUSTRAC's anti-money-laundering obligations for any party handling more than the prescribed cash threshold. The electronic ledger should sit on a network air-gapped from the casting process control system, with read-only mirrors pushed to an offsite server. Any attempt to edit a record should trigger an alert to the metallurgical superintendent and freeze further writes until the discrepancy is reviewed. Sample pulp and bead left over from fire assay should be stored for at least twelve months in a sealed cabinet so umpire laboratories can be engaged if a buyer disputes the original result.
Metal accounting and weighing protocols
Every gram of gold leaving the furnace must be reconciled against every gram reported in the mill, and the casting station is where that reconciliation becomes tangible. Weighbridges used for bar mass determination must be calibrated daily using Class M1 traceable masses, with calibration records stored alongside the production log. Pour-weight is captured automatically from the load cells under the mould, then compared to the demoulded weight after cooling; any discrepancy greater than 0.05% triggers a hold rather than a release.
Reconciliation extends to in-process materials. Slag, flue dust, and floor sweepings are weighed and sampled separately, with their precious-metal content tracked through the residue circuit until recovery is complete. Australian operators typically close the metal balance daily using software that integrates with the flotation and gravity plant SCADA — a discipline that satisfies Mining Act 1978 (WA) reporting expectations and gives early warning of leakage anywhere along the recovery chain. Referee umpire sampling rounds out the protocol: at a frequency set by the operator's risk appetite — usually one in twenty pours or one per week — an independent umpire draws a duplicate bar sample under the observation of both producer's and buyer's representatives, with the umpire result treated as the figure of merit in any subsequent dispute.
Surveillance, alarm systems, and cybersecurity
CCTV is the visible face of a much larger surveillance architecture. Cameras should cover the mould-loading station, the demoulding bench, the weighing station, the safe door, and every corridor approach, with frame rates high enough to read serial numbers on bar tags and timestamps synchronised to a network time protocol traceable to official Australian time signals. Footage is retained for at least 90 days on a write-once, read-many storage array so it cannot be edited, and motion-triggered bookmarks flag any off-hours activity for fast review.
Below the cameras, the network itself needs hardening. The gold-room supervisory systems should sit on a segmented VLAN with no internet egress, and any integration with corporate ERP or shipping software should pass through a unidirectional data diode. The same discipline applies to industrial IoT devices such as smart locks and environmental sensors — each one a potential entry point for an attacker who knows the easiest way to defeat physical security is to disable its electronic backbone. Operators who apply the same rigour they bring to digital transaction security elsewhere in their financial stack close many lower-effort intrusion paths before they reach the casting floor. Intrusion detection rounds out the stack with vibration sensors on the safe, glass-break detectors on windows, and infrared curtain sensors at the perimeter feeding into a 24/7 monitored alarm panel with two independent communications paths — typically a primary IP link to a Perth or Sydney monitoring centre and a backup 4G link.
Regulatory compliance and Australian standards
Operating a dore bar casting facility in Australia means navigating a layered compliance landscape. At the federal level, AUSTRAC requires suspicious-matter reporting for any unusual transaction, and the Australian Border Force oversees the export of doré bars, which travel under customs supervision to refineries in Switzerland, Hong Kong, or the buyer's nominated destination. State regulators add their own requirements: DMIRS in Western Australia, the Resources Regulator in New South Wales, and Resources Victoria each have reporting duties around production, royalty calculation, and incident notification.
Standards alignment matters when insurers and lenders conduct due diligence. AS/NZS 3800:2020 guides the design of high-security storage, while AS 2201.1 covers intruder alarm systems and AS 4801 sets the occupational health and safety baseline that any gold-room protocol must complement. Operators who can demonstrate alignment with these standards typically secure more favourable terms on specie insurance, which often runs as a separate policy covering theft, in-transit loss, and mysterious disappearance.
Documentation of compliance should not wait for the annual audit. A live compliance dashboard, fed from the same metal-accounting and access-control systems that run the gold room, gives management real-time visibility and gives auditors a single source of truth. That dashboard becomes a competitive asset when negotiating offtake agreements with refineries in Perth or overseas, because it demonstrates a discipline that sophisticated buyers increasingly require.
A complete gold-room envelope — from perimeter fencing and mantraps through to weighing, surveillance and metal-accounting software — can be scoped for any Australian operation, with engineering support available from feasibility study through to commissioning and ongoing plant management.