GLBA Safeguards Rule Explained
Understand the updated Safeguards Rule and the cybersecurity requirements placed on financial institutions.
Coming soon
GLBA Compliance Resources
GLBA Safeguards Guidance for Financial Institutions.
Practical guidance for banks, credit unions, mortgage companies, investment firms, insurance organizations, and other financial institutions implementing the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule.
GLBA Focus Areas
✓ Safeguards Rule
✓ Customer Information
✓ Risk Assessments
✓ Access Control
✓ Vendor Oversight
✓ Incident Response
✓ Security Awareness
✓ Board Reporting
Start Here
GLBA Compliance Learning Paths
Start with the GLBA Safeguards Rule and progress through risk management, technical safeguards, third-party oversight, and executive governance.
Protect Customer Information
Learn how administrative, technical, and physical safeguards work together to protect nonpublic customer information.
Coming soonBuild a GLBA Security Program
Translate GLBA requirements into operational security controls, governance, and ongoing compliance.
Explore Services →
GLBA Resource Library
Browse by Compliance Area
This framework page will expand as additional GLBA implementation guidance is published.
Foundation
GLBA Fundamentals
Learn the structure of the GLBA Safeguards Rule and financial institution responsibilities.
› GLBA Safeguards Rule Explained (Coming Soon)
› Risk Assessments (Coming Soon)
› Financial Services Security
› Compliance Services
Technical Safeguards
Protect Customer Information
Identity security, MFA, encryption, endpoint protection, monitoring, and secure remote access.
› Access Control (Coming Soon)
› Encryption (Coming Soon)
› Identity & Access Security
› Cybersecurity Operations
Operations
Operational Security
Security operations, vulnerability management, incident response, awareness training, and resilience.
› Incident Response (Coming Soon)
› Security Awareness (Coming Soon)
› Managed IT Services
› Penetration Testing
Governance
Oversight & Vendor Risk
Board reporting, service provider oversight, evidence collection, and examination readiness.
› Vendor Oversight (Coming Soon)
› Board Reporting (Coming Soon)
› Discuss GLBA Readiness
› Compliance Support
Security Readiness Assessment
Start with a clear view of your risk, readiness, and next steps.
DBT’s Security Readiness Assessment helps identify gaps across cybersecurity operations, identity, compliance, infrastructure, monitoring, and resilience so your team can prioritize practical improvements.