GLBA / FFIEC

Gramm-Leach-Bliley Act & FFIEC Guidelines

The regulatory backbone of financial services cybersecurity and privacy in the United States.

Get Free Security Assessment

View All Compliance Frameworks

What It Is

The Gramm-Leach-Bliley Act requires financial institutions to explain how they share customer information and to safeguard customers’ nonpublic personal information under its Safeguards Rule, which mandates a written information security program covering risk assessment, access controls, encryption, and vendor oversight.

The Federal Financial Institutions Examination Council (FFIEC) issues the shared cybersecurity examination standards that federal banking regulators use to assess a financial institution’s security program, incident response plan, and third-party risk management during routine examinations.

Who It Applies To

Banks, credit unions, mortgage lenders, and other financial institutions operating in Northern Virginia, as well as any business that receives or handles nonpublic personal financial information on their behalf.

How We Help

  • Build a written information security program (WISP) that satisfies the GLBA Safeguards Rule

  • Align technical and administrative controls with FFIEC IT examination handbooks

  • Prepare documentation and evidence ahead of regulatory examiner review

  • Implement vendor and third-party service provider risk management

  • Establish incident response and customer breach notification procedures

Ready to close your compliance gaps?

Get a free security assessment, no obligation.

Get Free Security Assessment