A tailored course, built for your situation
Mastering GLBA for Ex-Big4 Risk and Compliance Leaders
Produce defensible, audit-ready outputs with precision and consistency.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior compliance and risk professionals with Big4 advisory backgrounds operating in highly regulated financial services environments
Who this is not for
Entry-level analysts, non-regulated sector practitioners, or teams focused solely on IT rather than integrated compliance and governance
What you walk away with
- Produce complete and accurate GLBA compliance artifacts on the first attempt
- Apply a repeatable method for structuring Privacy Policy evaluations and Safeguards Rule mappings
- Reduce need for rework and sign-off delays through upfront clarity and traceability
- Demonstrate defensible, source-backed reasoning in regulator-facing documentation
- Deliver polished, executive-ready summaries that stand up under scrutiny
The 12 modules (with all 144 chapters)
Module 1. GLBA Overview and Financial Privacy Landscape
Understand the full scope of the Gramm-Leach-Bliley Act, its privacy obligations, and how it interacts with other financial regulations.
12 chapters in this module
- What is GLBA and who it applies to
- Historical context and regulatory intent
- Key entities: covered institutions, regulators, and enforcement
- Financial Privacy Rule vs Safeguards Rule
- Integration with FFIEC and state-level laws
- Recent enforcement trends and expectations
- Distinction from GDPR and CCPA
- Consumer information under GLBA
- Opt-out rights and disclosures
- Affiliated sharing rules
- Exceptions and exclusions
- Common misconceptions clarified
Module 2. Safeguards Rule: Structure and Requirements
Break down the FTC's Safeguards Rule and its 30+ technical and administrative controls with practical implementation guidance.
12 chapters in this module
- Scope of the Safeguards Rule
- Designated employee responsibility
- Risk assessment process
- Security program scope definition
- Data lifecycle under GLBA
- Access controls for nonpublic info
- Encryption standards in practice
- Multi-factor authentication implementation
- Secure disposal methods
- Incident response planning
- Third-party vendor oversight
- Annual reporting to leadership
Module 3. Privacy Notice Requirements and Delivery
Craft compliant, consumer-facing privacy notices that satisfy GLBA’s initial and annual disclosure mandates.
12 chapters in this module
- Initial notice timing and content
- Annual notice delivery methods
- Notice to consumers vs customers
- Clarity in language and format
- Electronic notice compliance
- Opt-out mechanism design
- Safe harbor for notices
- Record retention for disclosures
- Multi-product notice aggregation
- Language accessibility considerations
- Testing notice effectiveness
- Common failure points in audits
Module 4. GLBA Risk Assessment Methodology
Apply a structured, repeatable approach to identifying and documenting GLBA-related risks across business units and systems.
12 chapters in this module
- Defining the assessment scope
- Identifying data touchpoints
- Mapping data flows for privacy review
- Classifying nonpublic personal info
- Threat modeling for financial data
- Vulnerability evaluation framework
- Inherent vs residual risk
- Control gap analysis
- Stakeholder interview design
- Documenting assessment findings
- Risk rating criteria
- Linking findings to Safeguards controls
Module 5. Vendor Management under GLBA
Oversee third parties with access to customer data using a compliant due diligence and monitoring process.
12 chapters in this module
- Defining a GLBA-covered vendor
- Pre-contract due diligence
- Contractual requirements for vendors
- Reviewing vendor SOC 2 reports
- Oversight frequency and triggers
- Right-to-audit clauses
- Data processing agreements
- Vendor risk scoring
- Multi-tier vendor hierarchies
- Onboarding documentation
- Ongoing monitoring techniques
- Exit process and data return
Module 6. Incident Response and Breach Protocols
Prepare response workflows that align with GLBA expectations for data incidents involving customer information.
12 chapters in this module
- Incident definition under GLBA
- Escalation paths and roles
- Forensic readiness
- Legal counsel engagement
- Regulatory notification criteria
- Customer notification decisions
- Documentation standards
- Root cause analysis process
- Post-mortem tracking
- Reporting to senior leadership
- Coordination with PR teams
- Testing response plans
Module 7. Internal Audit and Compliance Testing
Design and execute internal tests to validate ongoing adherence to GLBA requirements.
12 chapters in this module
- Annual testing mandate
- Audit scope planning
- Sampling methodology
- Control testing techniques
- Evidence collection standards
- Finding severity classification
- Remediation tracking
- Reporting to executives
- Coordination with external auditors
- Test automation feasibility
- Continuous monitoring options
- Audit trail preservation
Module 8. Policy Development and Documentation
Build and maintain a cohesive set of GLBA-aligned policies that stand up to regulatory scrutiny.
12 chapters in this module
- Core policy components
- Safeguards Rule policy structure
- Privacy Policy content requirements
- Policy version control
- Approval workflows
- Distribution tracking
- Employee attestation process
- Mapping policies to controls
- Cross-referencing with NIST CSF
- Policy exception handling
- Review cycle cadence
- Integration with enterprise policy systems
Module 9. Training Program Design
Develop targeted awareness training that ensures employee understanding of GLBA obligations.
12 chapters in this module
- Training audience segmentation
- Core topics to cover
- Role-specific training needs
- Delivery formats and media
- Frequency and timing
- Tracking completion
- Testing knowledge retention
- Phishing simulation integration
- Handling remote workers
- Documentation for auditors
- Updating content annually
- Measuring training effectiveness
Module 10. Executive Reporting and Oversight
Structure regular updates that keep leadership informed and demonstrate compliance maturity.
12 chapters in this module
- Reporting frequency and cadence
- Board-level summary content
- Risk dashboard design
- Key metrics to track
- Incident reporting thresholds
- Budget and resource needs
- External audit findings
- Regulatory change tracking
- Benchmarking against peers
- Improvement roadmap
- Tone from the top
- Documentation for exams
Module 11. Integration with Other Frameworks
Align GLBA requirements with ISO 27001, NIST CSF, and SOX for efficient control implementation.
12 chapters in this module
- Control overlap identification
- Mapping GLBA to ISO 27001
- NIST CSF alignment
- SOX financial controls interface
- Consolidated risk assessments
- Unified compliance audits
- Shared control owners
- Efficiency gains
- Avoiding duplication
- Centralized documentation
- Cross-framework maturity models
- Reporting integrated progress
Module 12. Future-Proofing and Regulatory Horizon
Stay ahead of proposed changes and emerging expectations in financial data privacy.
12 chapters in this module
- Monitoring FTC rulemaking
- State-level privacy law convergence
- FFIEC guidance updates
- Best practices solidifying into expectations
- Consumer advocacy trends
- Technology shift impacts
- Cloud and data residency issues
- AI and automated decisioning
- Third-party ecosystem growth
- Cyber insurance expectations
- Regulatory exam preparation
- Building organizational resilience
How this maps to your situation
- New regulatory scrutiny on financial data handling
- Need for consistent, audit-ready documentation
- Executive demand for clearer compliance reporting
- Third-party risk rising with digital transformation
Before vs. after
Before
Compliance artifacts require multiple rounds of review, often missing nuances expected by regulators or internal auditors.
After
Produce polished, defensible GLBA outputs the first time, clear, complete, and confidently submitted.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 4-6 weeks with real-world application.
If nothing changes
...
How this compares to the alternatives
Unlike generic compliance overviews or academic summaries, this course delivers a structured, practitioner-tested method for producing GLBA-compliant outputs with quality and consistency, built for leaders with Big4 rigor and real-world execution demands.
Frequently asked
Is this course relevant to retired compliance officers?
Yes, it sharpens your ability to consult, advise, or re-engage with precision, especially in financial privacy and governance contexts.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Are the templates customizable?
Yes, all templates are provided in editable format for adaptation to your environment.
$199 one-time. Approximately 3 hours per module, designed for completion over 4-6 weeks with real-world application..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours