A tailored course, built for your situation
Deeper command of the GLBA framework for senior financial services practitioners
Build unshakeable command of GLBA’s structure, obligations, and implementation logic to lead confidently across audits, policy decisions, and cross-functional alignment.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior compliance and process leadership in financial services, responsible for implementing and sustaining GLBA compliance across evolving operational landscapes.
Who this is not for
This is not for junior analysts, generalist consultants without financial sector experience, or teams looking for checkbox compliance. It's for leaders already in the arena.
What you walk away with
- Map GLBA requirements directly to internal process workflows with confidence
- Anticipate auditor and regulator follow-ups using framework-backed reasoning
- Lead internal policy discussions with structural clarity on GLBA obligations
- Build repeatable documentation templates aligned to the Safeguards Rule and Privacy Rule
- Respond to cross-functional questions with specific provisions and examples on hand
The 12 modules (with all 144 chapters)
Module 1. GLBA framework foundations
Establish command of GLBA’s legislative intent, scope, and relationship to other financial regulations. Understand how the Privacy Rule and Safeguards Rule apply across consumer data handling.
12 chapters in this module
- Origins of GLBA legislation
- Definition of financial institution
- Scope of covered data types
- Consumer vs customer distinction
- Regulatory bodies involved
- Interplay with FFIEC guidance
- Relationship to state laws
- Exemptions and exclusions
- Core obligations timeline
- Common misconceptions clarified
- Structure of the Rules
- Key terminology deep dive
Module 2. Privacy Rule implementation
Learn how to implement the Privacy Rule with precision, including opt-out mechanisms, initial and annual notices, and integration with customer communication workflows.
12 chapters in this module
- Notice content requirements
- Delivery methods approved
- Timing of initial notice
- Annual notice frequency
- Opt-out right mechanics
- Exceptions to notice
- Joint marketing exemptions
- Third-party sharing rules
- Internal data use boundaries
- Record retention standards
- Model forms adoption
- Customization guardrails
Module 3. Safeguards Rule architecture
Design information security programs that meet Safeguards Rule standards, including risk assessments, controls selection, and vendor oversight.
12 chapters in this module
- Written information security plan
- Designated program owner
- Risk assessment methodology
- Employee training standards
- Access controls design
- Encryption expectations
- Monitoring mechanisms
- Service provider oversight
- Incident response integration
- Periodic testing frequency
- Change management linkage
- Management reporting rhythm
Module 4. Pretexting protections
Implement controls to prevent unauthorized access to customer data through social engineering or impersonation, as required by GLBA.
12 chapters in this module
- Definition of pretexting
- Phone-based attack vectors
- Email phishing patterns
- Verification protocol design
- Call center safeguards
- Customer identity proofing
- Internal access policies
- Training for frontline staff
- Audit logging requirements
- Response to suspected attempts
- Policy documentation
- Testing social defenses
Module 5. GLBA and FFIEC alignment
Align GLBA compliance with FFIEC Handbooks, especially the Information Technology Booklet, to ensure consistency across exams and audits.
12 chapters in this module
- FFIEC exam priorities
- Handbook cross-references
- Consistency with CRA
- Cybersecurity expectations
- Third-party risk management
- Audit scope overlap
- Examiner documentation
- Internal audit coordination
- Policy alignment checks
- Control testing standards
- Reporting to senior management
- Escalation pathways
Module 6. Vendor management under GLBA
Ensure third parties comply with GLBA obligations through due diligence, contracts, and ongoing monitoring.
12 chapters in this module
- Vendor risk classification
- Due diligence checklist
- Contractual requirements
- Safeguards Rule flowdown
- Privacy Rule obligations
- Data handling agreements
- Onsite audit rights
- Performance monitoring
- Breach notification terms
- Subcontractor oversight
- Exit strategies
- Renewal compliance review
Module 7. Internal audit and assurance
Design audit plans that validate GLBA compliance across business units and identify control gaps before regulators do.
12 chapters in this module
- Annual audit requirement
- Scope definition
- Testing methodology
- Sampling approach
- Evidence collection
- Findings categorization
- Management response
- Follow-up verification
- Reporting to leadership
- Coordination with legal
- External auditor handoff
- Audit trail maintenance
Module 8. Regulatory exam preparation
Prepare confidently for CFPB, OCC, or FRB exams with structured documentation, stakeholder alignment, and narrative clarity.
12 chapters in this module
- Common exam focus areas
- Document request patterns
- Interview preparation
- Process walkthrough design
- Evidence packaging
- Gap disclosure strategy
- Regulator communication
- Escalation protocols
- Post-exam action plans
- Feedback integration
- Change tracking
- Lessons learned review
Module 9. Policy development and maintenance
Write, maintain, and socialize policies that reflect GLBA obligations and evolve with business changes.
12 chapters in this module
- Policy ownership model
- Required policy areas
- Statement drafting
- Approval workflow
- Publication methods
- Employee attestation
- Version control
- Review cycle frequency
- Integration with training
- Alignment with procedures
- Exception handling
- Policy audit readiness
Module 10. Training program design
Develop role-based training that ensures all employees understand their GLBA responsibilities and how to act on them.
12 chapters in this module
- Audience segmentation
- Learning objectives
- Content development
- Delivery methods
- Frequency standards
- Role-specific modules
- Pretexting simulations
- Testing comprehension
- Completion tracking
- Refresher cycles
- Leadership messaging
- Training audit trail
Module 11. Incident response integration
Embed GLBA considerations into incident response plans, especially around data breaches involving customer information.
12 chapters in this module
- Breach definition
- Notification obligations
- Timeline expectations
- Internal reporting
- Legal counsel involvement
- Regulator disclosure
- Customer communication
- Media strategy
- Forensic coordination
- Corrective action planning
- Post-mortem process
- Regulatory follow-up
Module 12. Continuous improvement roadmap
Establish a living compliance program that adapts to regulatory changes, business evolution, and lessons learned.
12 chapters in this module
- Regulatory change tracking
- Internal feedback loops
- Audit findings integration
- Executive reporting
- Benchmarking against peers
- Technology enablement
- Staffing alignment
- Budget planning
- Succession planning
- Program maturity model
- Year-over-year goals
- Stakeholder satisfaction
How this maps to your situation
- Regulatory exam preparation
- Internal audit readiness
- Vendor oversight execution
- Policy and training ownership
Before vs. after
Before
Navigating GLBA through fragmented guidance and reactive responses.
After
Leading with structural clarity, aligned documentation, and confident decision-making across audits and cross-functional initiatives.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 6-8 hours over 4 weeks, designed for integration into real-time work cycles.
How this compares to the alternatives
Generic compliance courses cover multiple regulations superficially. This course focuses exclusively on GLBA with depth, precision, and operational realism tailored to senior financial services practitioners.
Frequently asked
Is this course specific to PNC or any single institution?
No. It is designed for senior financial services leaders regardless of employer. The content focuses on the GLBA framework itself, not internal policies or systems.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does this cover state-level privacy laws?
It covers how GLBA interacts with state laws, but does not replace deep state-specific compliance training.
$199 one-time. Approximately 6-8 hours over 4 weeks, designed for integration into real-time work cycles..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours