AWA’s GLBA Risk Assessment Services
To assist companies approaching GLBA compliance, AWA provides a range of services including GLBA readiness assessments, evaluation of current security policies, procedures, and internal controls. Then, to meet GLBA information security requirements, our team carries out gap analysis and GLBA risk assessments. These efforts are done in conjunction with your compliance team.
What Are GLBA Information Security Regulations?
The Gramm-Leach-Bliley Act (GLBA) of 1999 requires financial institutions to take “reasonable” steps to protect the security and confidentiality of customer information, including protecting against any anticipated threats or hazards that could result in a significant compromise of its systems or resources. This law is administered by the Federal Financial Institutions to ensure that federal agencies share information on emerging risks in order to protect consumers’ personal financial information and prevent identity theft.
The financial services sector was required to become compliant with the GLBA regulations in 2001. Today, this law is administered by The Federal Financial Institutions Examination Council (FFIEC) and requires financial institutions to maintain reasonable security measures for their customers’ nonpublic personal information such as your name, social security number, account balances and transaction information.
Financial institutions that must comply with these security regulations include :
- banks and other depository institutions (including credit unions),
- insurance companies,
- broker/dealers in securities, mutual funds, futures and options on securities, and investment companies.
- debt collection agencies,
- Investment advisors,
- Real estate settlement service providers.
