 |
Gramm-Leach-Bliley Act: Information Security Plan | 2005-09-27 03:00:03 |
Community College of Baltimore County |
| |
The Gramm-Leach-Bliley Act (GLB), enacted in 2000, requires financial institutions to take steps to ensure the security and confidentiality of customer records such as names, addresses, phone numbers, bank and credit card account numbers, income and credit histories, and social security numbers. The Privacy Rule, found at 16 C.F.R Part 313 of the Federal Register addresses concerns relating to consumer financial privacy. Under these regulations, colleges and universities are deemed to be in compliance with the privacy provisions of the GLB Act if they are in compliance with the Family Educational Rights and Privacy Act (FERPA).
|
| |
 |
Network Device Scanner: Ensuring a GLBA Compliant Network | 2005-09-27 03:00:03 |
Refense Technologies |
| |
Detecting vulnerabilities and verifying the implementation of logging systems and authentication across thousands of network devices is a tedious and difficult, if not an impossible task. However this task is vital for compliance with the GLBA regulations and to ensure a strong security posture. Network Device Scanner provides a scalable, automated method of managing vulnerabilities within network devices. By utilizing Network Device Scanner financial organizations can quickly determine the vulnerabilities and if proper authentication, access controls, logging systems have been implemented within network devices.
|
| |
 |
Governing for Enterprise Security | 2005-09-15 03:00:04 |
Carnegie Mellon University |
| |
This white paper examines governance thinking, principles, and approaches and applies them to the subject of enterprise security. Its primary intent is to increase awareness and understanding of the issues, opportunities, and possible approaches related to treating security as a governance concern. In addition, this paper identifies resources for enterprise security that leaders can use both within their organizations and with their networked partners, suppliers, and customers.
|
| |
 |
Remediation Fiction and Facts: A Business Based Guide to Remediation | 2005-09-27 03:00:03 |
Internet Security Systems |
| |
The objective of this paper is to allow for a complete understanding of a business-based remediation process. Understanding this process allows for the proper application of business resources, and creates the proper perspective for taking and accepting risk. This process will also help those public companies that are still struggling with how to develop the risk model and represent it with respect to the business process. This application, in part, is required by the Sarbanes-Oxley Act (SOX) and its predecessor in the finance area, the Gramm-Leech-Bliley Act (GLBA). These acts, as well as a great deal of international regulations, are based in the premises stated in BS7799 and adopted into ISO17799.
|
| |
 |
See how retail banks can break down the barriers to innovation | 2005-06-01 |
IBM |
| |
Retail banking has traditionally been a place where the road to innovation is blocked by numerous barriers: IT, corporate culture, operational limitations and more. But there is an opportunity to break from the past by moving to next-generation architectures and applications.
|
| |
 |
Regulation Compliance Manager - GLBA | 2005-09-27 03:00:03 |
Vericept |
| |
Protecting non-public personal information (NPI) is a key requirement under the Gramm-Leach-Bliley Act (GLBA) and can be a challenge for financial institutions. A wide range of communication channels available to employees, such as instant messaging, chat, web-based email, blogs and peer-to-peer file sharing can threaten customer information and expose your financial institution to reputation, compliance, legal and financial risk. Vericept has developed a unique solution specifically targeting the problems surrounding internal risks. Vericept's Information and Compliance Manager for GLBA gives you the ability to monitor, capture, analyze and report on GLBA compliance breaches related to non-public personal information, credit card numbers and Social Security Numbers.
|
| |
 |
Six Regulatory Mandates for Managing Your Information Security Program | 2005-09-20 03:00:07 |
ATTUS Technologies |
| |
Interagency guidelines, bulletins and the Gramm-Leach-Bliley act of 1999 (GLBA) require that "financial institutions" protect the privacy and integrity of personal customer information and financial data. The GLBA was developed specifically to deal with the emerging electronic landscape of Internet transactions, e-commerce business, on-line banking and cyber crime. This paper will discuss six areas of concentration that must be addressed in building an Information Security Program that meets requirements of the various regulatory directives.
|
| |
 |
Recall's Quality in Action: Protect Your Company's Assets Through Secure Destruction | 2005-09-27 03:00:03 |
Recall |
| |
This paper contains important customer and employee information and is simply placed in the trash or the recycle waste stream, making it readily available to identity thieves and dumpster divers. With the increase of information privacy legislation, all businesses are faced with new security risks and challenges. The information presented in this white paper contains education on the current legislative landscape and how to maintain compliance, specifically focusing on the best solution for secure disposal of information at the end of its life cycle.
|
| |
 |
GLBA Security Breach Response and Notification | 2005-09-27 03:00:03 |
Compushare |
| |
The FFIEC agencies have jointly issued guidance (FIL-27-2005) for financial institutions to develop and implement a response program designed to further protect customer non-public information through establishing policies and procedures for identifying, controlling, and responding to unauthorized access. The guidance is an interpretation of section 501(b) of the Gramm-Leach-Bliley Act (GLBA) and the Interagency Guidelines Establishing Information Security Standards. FIL-27-2005 has been put in place to set guidance standards and expectations which are effective immediately.
|
| |
 |
The Role of Security Management in Regulatory Compliance | 2006-01-26 10:59:15 |
|
| |
This white paper describes the major regulations that are impacting IT operations in businesses today and highlights the common requirements. Not surprisingly, the requirement for strong security management cuts across all major regulations, which is why a comprehensive identity and access management platform is imperative. Download the paper to read about the identity and access management, provisioning, and monitoring capabilities that are built into the CA compliance platform and how they can simplify all your compliance efforts.
|
| |