A tailored course, built for your situation
Deeper command of the GLBA compliance framework
Master the Graham Leach Bliley Act's structure, obligations, and implementation patterns with precision
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Generic compliance training leaves practitioners unprepared for GLBA-specific examination pressure and control design
The situation this course is for
Most compliance upskilling treats GLBA as a checkbox. But in practice, the regulation demands structured understanding of privacy safeguards, risk assessment cycles, and interagency expectations. Without deep command, teams default to over-documentation or reactive fixes, undermining credibility and slowing execution.
Who this is for
Senior compliance and risk practitioners in financial services who influence talent, policy, or control execution but lack formal training in GLBA's operational mechanics
Who this is not for
Junior analysts seeking entry-level compliance knowledge or professionals outside financial-sector privacy domains
What you walk away with
- Navigate the full GLBA regulatory text with confidence and context
- Map Safeguards Rule requirements directly to control design and audit evidence
- Explain GLBA’s relationship to FTC enforcement, FFIEC handbooks, and internal privacy standards
- Build inspection-ready documentation using structured, repeatable templates
- Train others with a sourced, framework-aligned curriculum
The 12 modules (with all 144 chapters)
Module 1. GLBA Fundamentals and Legislative Origins
Understand the historical context, scope, and applicability of the Graham Leach Bliley Act to financial institutions.
12 chapters in this module
- Financial Services Modernization Act background
- Key sections of GLBA text
- Definitions of financial institution
- Personal information scope
- Consumer vs customer distinction
- Regulatory jurisdiction split
- FTC and OCC enforcement roles
- State law interaction
- Exemptions and exclusions
- Affiliate sharing rules
- Opt-out mechanism design
- Privacy Notice timing requirements
Module 2. The Privacy Rule Decoded
Break down the Privacy Rule's core obligations, notice delivery mechanics, and compliance timelines.
12 chapters in this module
- Initial privacy notice requirements
- Annual notice delivery methods
- Content elements of privacy notice
- Electronic delivery compliance
- Exceptions to notice
- Joint marketing agreements
- Opt-out rights explanation
- Effect of opt-out election
- Internal sharing exceptions
- Third-party disclosure rules
- Data retention implications
- Recordkeeping standards
Module 3. Safeguards Rule Architecture
Explore the FTC-mandated information security program structure and its required components.
12 chapters in this module
- Designated recipient requirement
- Risk assessment process design
- Security governance committee
- Employee training frequency
- Service provider oversight
- Access control standards
- Encryption expectations
- Multi-factor authentication
- Incident response planning
- Change management integration
- Testing frequency benchmarks
- Reporting to board or governing body
Module 4. GLBA and Interagency Guidelines
Trace how FFIEC, OCC, and FRB guidance shapes implementation within regulated institutions.
12 chapters in this module
- Interagency Guidelines overview
- Customer Information Security Program
- Risk assessment methodology
- Categorization of information systems
- Threat identification process
- Vulnerability management
- Penetration testing alignment
- Third-party risk integration
- Business continuity links
- Audit trail requirements
- Data classification tiers
- Encryption in transit and at rest
Module 5. GLBA and Incident Response
Align breach detection and escalation workflows with GLBA's expectations for consumer protection.
12 chapters in this module
- Breach definition under GLBA
- Consumer notification triggers
- Regulatory reporting thresholds
- Coordination with legal counsel
- Forensic investigation scope
- Data subject impact assessment
- Call tree activation
- Press statement alignment
- FTC post-breach reporting
- Corrective action planning
- Regulatory examination prep
- Lessons learned documentation
Module 6. GLBA and Vendor Management
Ensure third-party relationships comply with due diligence and contractual obligations.
12 chapters in this module
- Pre-contract due diligence
- Safeguards Rule in vendor agreements
- Right to audit clauses
- Subcontractor oversight
- Cloud provider compliance
- Penetration testing access
- Data handling expectations
- Incident notification timelines
- Exit strategy requirements
- Compliance certification review
- Ongoing monitoring approach
- Vendor audit report validation
Module 7. GLBA and Data Governance
Integrate GLBA compliance into enterprise data classification and stewardship practices.
12 chapters in this module
- Identifying nonpublic personal information
- Data inventory mapping
- Tiered classification framework
- Data stewardship roles
- Retention schedule alignment
- Disposition controls
- Data lineage tracing
- Metadata tagging
- Cross-border data flow
- Consent management
- Data subject access rights
- Deletion obligation tracking
Module 8. GLBA in Mergers and Acquisitions
Navigate ownership changes, data integration, and compliance continuity during financial firm transitions.
12 chapters in this module
- Due diligence checklist
- Privacy notice update timeline
- Opt-out rights during sale
- Data transfer legality
- System integration risks
- Regulatory notification timing
- Customer communication plan
- Employee data handling
- Third-party contract review
- Compliance program harmonization
- Regulatory approval process
- Post-acquisition audit planning
Module 9. GLBA and Regulatory Examinations
Prepare confidently for FTC, OCC, or state-level reviews with structured evidence and narrative.
12 chapters in this module
- Examination notice timing
- Document request response
- Interview preparation
- Control mapping documentation
- Risk assessment version history
- Training attendance records
- Incident logs review
- Audit trail access
- Remediation tracking
- Regulatory correspondence
- Resolution timelines
- Management response drafting
Module 10. GLBA and Internal Audit
Design audit plans that validate compliance with Privacy and Safeguards Rules effectively.
12 chapters in this module
- Audit scope definition
- Testing methodology
- Sample size determination
- Control effectiveness evaluation
- Findings categorization
- Remediation tracking
- Follow-up timing
- Reporting to governance committee
- Independence standards
- External audit coordination
- Audit committee briefing
- Tone at the top assessment
Module 11. GLBA and Training Programs
Develop role-specific training that drives retention and behavioral change.
12 chapters in this module
- Audience segmentation
- Annual training requirement
- Phishing simulation linkage
- Role-based content
- Manager training focus
- HR integration points
- Compliance attestations
- Training delivery formats
- Recordkeeping standards
- Effectiveness measurement
- Refresher timing
- New hire onboarding integration
Module 12. GLBA Mastery Integration
Synthesize knowledge into a personal playbook for sustained compliance leadership.
12 chapters in this module
- Personal command checklist
- Control mapping template
- Examination readiness dashboard
- Training curriculum outline
- Audit support pack
- Incident response flow
- Vendor review toolkit
- Data governance alignment
- Stakeholder communication
- Continuous improvement cycle
- Regulatory change monitoring
- Knowledge transfer plan
How this maps to your situation
- Preparing for a regulatory examination
- Designing a GLBA-compliant training program
- Responding to third-party audit requests
- Onboarding a new financial product line
Before vs. after
Before
GLBA compliance is approached reactively, relying on legal teams or external consultants to interpret obligations.
After
You lead with structured understanding , able to design, validate, and communicate GLBA-aligned controls independently.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion in 6-8 weeks with weekly pacing.
If nothing changes
Without deep command of GLBA, practitioners remain dependent on external guidance, slowing initiative velocity and limiting influence in strategic compliance discussions.
How this compares to the alternatives
Unlike generic compliance courses, this program isolates GLBA's operational mechanics , no filler, no abstraction. Unlike vendor-led training, it’s independent, in-depth, and structured for practitioners who lead without authority.
Frequently asked
Is this course focused only on the Privacy Rule?
No. It covers both the Privacy Rule and the Safeguards Rule in full, including implementation, examination, and governance.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me prepare for regulatory exams?
Yes. The course includes modules specifically on examination readiness, evidence organization, and response drafting.
$199 one-time. Approximately 3 hours per module, designed for completion in 6-8 weeks with weekly pacing..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours