A tailored course, built for your situation
Mastering GLBA for Financial Services Compliance Practitioners
A structured path to rigorous, defensible compliance grounded in real-world enforcement outcomes.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
AVP-level compliance and risk professionals in global financial institutions managing GLBA, data privacy, and regulatory response frameworks.
Who this is not for
Junior analysts, external auditors, or professionals outside financial services where GLBA does not apply.
What you walk away with
- Trace every GLBA requirement to its originating statute, FTC guidance, or enforcement case
- Respond to peer challenges with specific examples from real regulatory actions
- Build control narratives that stand up to internal and external audit scrutiny
- Reference exact sections of the Gramm-Leach-Bliley Act and implementing rules in documentation
- Use precedent-based reasoning to justify control design, not just policy alignment
The 12 modules (with all 144 chapters)
Module 1. Origins of GLBA and the Financial Modernization Context
Understand the legislative intent behind the Gramm-Leach-Bliley Act, including the repeal of Glass-Steagall and the creation of financial conglomerates. Explore how data handling expectations emerged from systemic risk reforms.
12 chapters in this module
- The the current cycle Financial Services Modernization Act
- Repeal of Glass-Steagall Act provisions
- Creation of financial holding companies
- Consumer privacy expectations post-merger
- FRB and OCC joint statements on data use
- Early FTC enforcement posture
- State-level privacy overlaps
- Data segmentation in multi-line institutions
- Inter-agency coordination models
- Privacy Notice rule foundations
- Safeguards Rule precursor frameworks
- Initial GLBA examination protocols
Module 2. FTC Safeguards Rule: Structure and Scope
Break down the FTC’s Safeguards Rule into actionable control domains. Learn how each requirement maps to technical, administrative, and physical safeguards.
12 chapters in this module
- Scope of covered financial institutions
- Designation of internal responsibility
- Risk assessment documentation standards
- Employee training requirements
- Access controls for customer data
- Encryption standards for data at rest
- Encryption in transit protocols
- Multi-factor authentication mandates
- Incident response planning
- Vendor oversight obligations
- Periodic testing frequency
- Change management integration
Module 3. Privacy Rule: Notice and Choice Requirements
Master the requirements for initial and annual privacy notices. Learn how to structure opt-out mechanisms and handle joint marketing disclosures.
12 chapters in this module
- Initial privacy notice timing
- Annual notice delivery methods
- Content requirements for clarity
- Opt-out rights for consumers
- Exceptions to opt-out rules
- Joint marketing disclosures
- Third-party sharing statements
- Online notice presentation
- Multilingual notice obligations
- Customer service handling of requests
- Record retention for notices
- Safe harbor provisions
Module 4. Interagency Guidelines and Enforcement Trends
Review joint guidance from the FRB, OCC, and FDIC. Analyze enforcement actions and consent orders to identify high-risk control gaps.
12 chapters in this module
- the current cycle Interagency Guidelines overview
- the current cycle Safeguards Rule updates
- FTC v. LifeLock precedent
- OCC enforcement against regional banks
- FRB supervision findings
- FDIC consent order patterns
- Penalties for noncompliance
- Consumer harm threshold
- Data breach reporting triggers
- Third-party vendor failures
- Reputational damage cases
- Corrective action timelines
Module 5. Control Mapping Across Business Units
Map GLBA requirements to specific functions: lending, wealth management, payments, and IT. Identify ownership and accountability.
12 chapters in this module
- Lending data handling practices
- Wealth management client profiles
- Payment processing logs
- IT asset inventory standards
- Cloud data storage obligations
- Call center recording policies
- Email retention settings
- Mobile app data collection
- KYC process alignment
- Anti-money laundering overlaps
- Cross-border data flows
- Data localization requirements
Module 6. Risk Assessment Methodology for GLBA
Build a defensible risk assessment process specific to GLBA. Use standardized templates and scoring frameworks.
12 chapters in this module
- Identifying customer information systems
- Categorizing data sensitivity
- Threat modeling approach
- Vulnerability scoring system
- Likelihood-impact matrix
- Control gap analysis
- Remediation prioritization
- Third-party risk inclusion
- Cloud provider risk factors
- Insider threat considerations
- Physical security review
- Documentation standards
Module 7. Vendor Management and Third-Party Risk
Ensure compliance with vendor oversight requirements. Develop due diligence and monitoring processes.
12 chapters in this module
- Vendor identification process
- Pre-contract due diligence
- Data processing agreements
- Subcontractor oversight
- Audit rights clauses
- Cybersecurity questionnaires
- Penetration testing requirements
- Incident reporting SLAs
- Termination for noncompliance
- Ongoing monitoring frequency
- Vendor risk tiering
- Contract renewal checks
Module 8. Incident Response and Breach Notification
Align incident response plans with GLBA requirements. Understand when and how to notify regulators and customers.
12 chapters in this module
- Breach definition under GLBA
- 72-hour reporting expectations
- Regulator notification process
- Customer notification letters
- Credit monitoring obligations
- Media statement preparation
- Law enforcement coordination
- Internal escalation paths
- Legal counsel engagement
- Post-mortem documentation
- Regulatory follow-up
- Corrective action planning
Module 9. Training and Employee Accountability
Develop effective employee training programs. Ensure staff understand their role in protecting customer data.
12 chapters in this module
- Annual training requirement
- Role-based curriculum design
- Phishing simulation integration
- Data handling policies
- Physical access rules
- Remote work considerations
- Mobile device policies
- Social engineering defenses
- Reporting suspicious activity
- Disciplinary actions
- Training record keeping
- Acknowledgment signatures
Module 10. Audit Preparation and Examination Readiness
Prepare for routine and surprise examinations. Know what examiners look for and how to present evidence effectively.
12 chapters in this module
- OCC examination scope
- FRB review protocols
- FTC investigation triggers
- Document organization standards
- Control testing walkthroughs
- Interview preparation
- Evidence retention periods
- Prior finding resolution
- Cross-agency coordination
- Examiner communication norms
- Corrective action responses
- Follow-up inspection prep
Module 11. International Data Transfer Compliance
Address cross-border data flows under GLBA and complementary frameworks like GDPR.
12 chapters in this module
- EU-US data transfer mechanisms
- Standard Contractual Clauses
- UK data adequacy status
- APAC privacy law overlaps
- Data localization laws
- Encryption for transit
- Data residency mapping
- Vendor subprocessing
- Internal data routing logs
- Customer consent requirements
- Regulator inquiry responses
- Multi-jurisdictional alignment
Module 12. Sustaining Compliance Across Leadership Changes
Create self-documenting, transferable compliance frameworks that survive personnel shifts.
12 chapters in this module
- Control ownership documentation
- Succession planning for compliance
- Knowledge transfer protocols
- Standard operating procedures
- Automated control monitoring
- Centralized repository design
- Version control for policies
- Cross-functional alignment
- Executive briefing templates
- Board-level summary formats
- Regulatory change tracking
- Continuous improvement process
How this maps to your situation
- Preparing for regulatory examination
- Responding to internal audit findings
- Designing controls for new product launch
- Managing third-party risk in cloud migration
Before vs. after
Before
Compliance decisions are reactive, based on general understanding and policy summaries.
After
Every control decision is backed by statute, precedent, and documented rationale accessible to peers and examiners.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 12 hours of focused reading and implementation planning, designed for integration into current compliance cycles.
If nothing changes
Without structured depth in GLBA compliance, practitioners risk appearing reactive during audits, unable to defend design choices when challenged by leadership or regulators.
How this compares to the alternatives
Unlike generic compliance overviews, this course delivers verifiable sources, real enforcement precedents, and control templates tied directly to GLBA requirements, enabling immediate application in audits and peer reviews.
Frequently asked
Is this course relevant to non-US financial institutions?
Yes, any institution handling data of US consumers falls under GLBA jurisdiction. The course includes guidance on international application.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Are real enforcement cases included?
Yes, every major FTC and interagency enforcement action since the current cycle is analyzed for control lessons.
$199 one-time. Approximately 12 hours of focused reading and implementation planning, designed for integration into current compliance cycles..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours