DEFINITION:
Gramm-Leach-Bliley Act (GLBA) regulations require organizations to protect themselves against unauthorized access, anticipated hazards and risks threatening the security or integrity of consumer financial information.
CHALLENGE:
GLBA has introduced a great deal more rigor in how banks and credit unions have to handle, manage and secure their customers' personal information. In today's world much of our information is computerized making information security a major component of GLBA compliance.
The guidelines define customer information as any record containing a customer's non-public personal information, whether in printed, electronic or other form. They require each institution to implement a written information security program that includes administrative, technical and physical safeguards appropriate to the size and complexity of the bank as well as the nature and scope of its activities.
SOLUTION:
Qualys® is ideally suited to help banks, credit unions, brokers, dealers and investment companies achieve compliance with GLBA quickly and cost-effectively. Qualys' flagship solution, QualysGuard®, provides organizations and auditors with an automated, on demand system to assess and reduce network security risks for protecting electronic information. QualysGuard also allows users to create GLBA-specific reports to measure and document ongoing security compliance efforts.
The following table outlines how QualysGuard can automate the key compliance requirements associated with GLBA:
| Key GLBA Requirements | QualysGuard Capabilities |
|---|---|
| Assessing Risk | QualysGuard delivers the industry's most accurate network security audits with the largest database of vulnerability checks. |
| Manage and Control Risk | With QualysGuard, companies can prioritize remediation efforts and manage risk based on asset value and key compliance objectives. |
| Oversee Service Provider Arrangements | QualysGuard makes it convenient to verify that third-party affiliates, subsidiaries and service providers are GLBA compliant by supporting on demand security audits through a standard web browser, anytime, anywhere. |
| Adjust the Program | The highly flexible and distributed nature of QualysGuard's on demand solution gives organizations the ability to modify policies across the entire enterprise as needed. |
| Report to the Board | QualysGuard executive reports provide a high-level snapshot with trend analysis of an organization's network security posture and business risk. |
