A tailored course, built for your situation
Deeper command of the GLBA compliance framework
A 199 course tailored for Jelle to master the structure, controls, and expectations that define GLBA implementation in financial services
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Financial services compliance advisor with exposure to GLBA-related governance and client data policies, operating at the intersection of regulation and implementation
Who this is not for
Entry-level analysts or professionals outside financial services compliance, or those focused solely on marketing or sales under GLBA
What you walk away with
- Complete understanding of GLBA’s three rule pillars: Financial Privacy, Safeguards, and Pretexting
- Ability to map GLBA requirements directly to internal controls and data handling workflows
- Confidence to explain GLBA’s application across business lines and to external partners
- Access to tested documentation templates and control mapping examples
- Clear framework for updating policies in line with examiner expectations
The 12 modules (with all 144 chapters)
Module 1. GLBA Foundations and Regulatory Intent
Establish the purpose and scope of GLBA within financial services, focusing on the Financial Privacy Rule, Safeguards Rule, and Pretexting Provisions. Understand what regulators expect beyond policy existence.
12 chapters in this module
- Origins of GLBA
- Core legislative goals
- Who GLBA applies to
- Key definitions explained
- Recent regulatory emphasis
- Regulator expectations today
- Interaction with other laws
- Common misinterpretations
- Scope boundaries
- Exemptions and exclusions
- Enforcement history
- Case study: recent findings
Module 2. Financial Privacy Rule in Practice
Dive into the Financial Privacy Rule, covering notice requirements, opt-out rights, and when information sharing is permitted. Learn how to assess compliance in client-facing workflows.
12 chapters in this module
- Notice content requirements
- Timing of disclosure
- Delivery methods
- Joint marketing exceptions
- Opt-out mechanisms
- Record retention
- Third-party sharing rules
- Client categories
- Privacy notice updates
- Internal tracking systems
- Audit evidence needed
- Common gaps in implementation
Module 3. Safeguards Rule Structure and Application
Break down the Safeguards Rule into actionable components: risk assessment, safeguards design, vendor oversight, and incident response planning specific to GLBA.
12 chapters in this module
- Scope of covered information
- Designated employee requirement
- Risk assessment steps
- Security controls by category
- Access controls policy
- Encryption expectations
- Multi-factor adoption
- Vendor management process
- Incident response plan
- Testing frequency
- Reporting lines
- Documentation standards
Module 4. Pretexting and Identity Protection
Understand how GLBA prohibits pretexting and what steps financial institutions must take to prevent social engineering and unauthorized access to customer records.
12 chapters in this module
- Definition of pretexting
- Common attack vectors
- Employee training content
- Verification protocols
- Call center safeguards
- Email authentication
- Record access controls
- Fraud detection systems
- Response to suspected pretexting
- Reporting obligations
- Regulatory guidance sources
- Case example: breach investigation
Module 5. GLBA and Data Classification
Learn how to classify data under GLBA, define what constitutes nonpublic personal information, and align classification with handling rules across departments.
12 chapters in this module
- What is nonpublic information
- PII vs NPI distinction
- Data inventory methods
- Storage classification
- Transmission rules
- Disposal standards
- Access logging
- Departmental responsibilities
- Client data lifecycle
- Cloud data handling
- Third-party flows
- Audit trail requirements
Module 6. Vendor Oversight and Third-Party Risk
Map GLBA vendor requirements to procurement and oversight workflows, ensuring third parties comply with safeguards and privacy obligations.
12 chapters in this module
- Vendor identification
- Due diligence steps
- Contractual clauses needed
- Ongoing monitoring
- Audit rights negotiation
- Subcontractor oversight
- Risk tiering approach
- Compliance checklists
- Vendor incident response
- Exit protocols
- Performance metrics
- Documentation retention
Module 7. Internal Control Mapping for GLBA
Translate GLBA rules into internal control statements, control design, and testing approaches used in audit and self-assessment.
12 chapters in this module
- Control objectives by rule
- Control design examples
- Ownership assignment
- Testing frequency
- Evidence collection
- Remediation tracking
- Control rationalization
- Automation opportunities
- Reporting to leadership
- Audit preparation
- Internal vs external testing
- Continuous monitoring
Module 8. Documentation That Stands Up to Review
Build clear, defensible documentation for risk assessments, policies, training records, and incident logs that meet regulator expectations.
12 chapters in this module
- Risk assessment templates
- Policy version control
- Training sign-offs
- Meeting minutes content
- Incident log structure
- Vendor review records
- Testing result retention
- Executive sign-off
- Document hierarchy
- Retrieval systems
- Review cycles
- Archiving rules
Module 9. GLBA Integration with Other Frameworks
Align GLBA with existing compliance efforts like ISO 27001, SOC 2, and internal audit frameworks to avoid duplication and strengthen overall posture.
12 chapters in this module
- Mapping to ISO 27001
- SOC 2 control overlap
- NIST CSF alignment
- Internal audit coordination
- Single control, multiple use
- Cross-framework reporting
- Efficiency gains
- Holistic risk view
- Unified policy language
- Training integration
- Assessment bundling
- Leadership reporting
Module 10. Training and Awareness Programs
Design effective employee training that covers GLBA requirements, pretexting risks, and data handling duties, tailored to different roles.
12 chapters in this module
- Audience segmentation
- Training frequency
- Content formats
- Pretexting simulations
- Role-specific modules
- Testing understanding
- Refresher cycles
- Leadership messaging
- Third-party training
- Recordkeeping
- Effectiveness metrics
- Improvement feedback
Module 11. Audit Preparation and Examiner Readiness
Prepare for GLBA-related audits and supervisory reviews with confidence, knowing what evidence is expected and how to present it effectively.
12 chapters in this module
- Common examiner questions
- Evidence packets
- Interview readiness
- Control walkthroughs
- Gap identification
- Response planning
- Coordination across teams
- Documentation walkthrough
- Executive briefing
- Post-review follow-up
- Lessons learned
- Continuous improvement
Module 12. Future-Proofing GLBA Compliance
Anticipate upcoming changes, supervisory focus areas, and how to keep GLBA implementation current and resilient amidst evolving threats.
12 chapters in this module
- Tracking regulatory updates
- Supervisory priorities
- Emerging threats
- Technology shifts
- Client data expansion
- Cross-border considerations
- Policy review cycles
- Stakeholder updates
- Budget alignment
- Metrics evolution
- Leadership communication
- Long-term roadmap
How this maps to your situation
- When initiating a GLBA review
- Before an audit cycle begins
- After a vendor incident
- During policy renewal planning
Before vs. after
Before
GLBA compliance feels fragmented, with policies, controls, and audits managed in silos and unclear ownership
After
You lead with confidence, structuring GLBA implementation around a complete, defensible framework that aligns with business operations
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, with self-paced access to all materials.
How this compares to the alternatives
Public courses often focus on generic privacy laws. This course is tailored specifically to GLBA and financial services implementation, with deep operational detail not found in broad compliance overviews.
Frequently asked
Who is this course for?
Financial compliance advisors, governance specialists, and risk officers in financial institutions who need to understand and implement GLBA requirements with precision.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is there a certificate upon completion?
Yes, a certificate of completion is issued after finishing all modules and a final knowledge check.
$199 one-time. Approximately 3-4 hours per module, with self-paced access to all materials..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours