GLBA Requirements
The GLBA requirement list includes the following steps, all automatically enacted by the ProcessGene™ GRC Software Suite:
Lifecycle step |
GLBA activity |
|
GLBA context establishment |
- Definition of GLBA compliance related business processes
- Delineation of process diagrams (optional)
- Definition of assets within the GLBA scope
- Standardization and documentation of GLBA regulations, policies and procedures
|
|
Risk identification |
- Risk description, identification of risk stakeholders
- Risk classification and determination of heat-maps
- Risk assessment and measurement
- Determination of Key Risk Indicators (KRIs)
- Risk tolerance determination
|
|
Control determination |
- Definition of controls to mitigate identified GLBA risks
- Assignment of GLBA control owners
- Scheduling and monitoring GLBA control execution
- Assessment of residual risk levels
|
|
Requirement management |
- Requirement definition
- Automated requirement workflow management
- Requirement fulfillment monitoring
|
|
GLBA audit and remediation |
- Definition and scheduling of GLBA audit plans
- Definition of mechanisms for testing ongoing GLBA compliance
- Collection, analysis and storage of GLBA audit results
- Remediation plan definition, execution and follow-up
|
|
GLBA related incident management |
- Incident recording
- GLBA related incident handling (using scheduled workflows)
- GLBA related incident analysis and reporting
- Incident monitoring and follow-up
|
|
GLBA certification |
- Hierarchal GLBA certification process determination
- Establishment of an automated GLBA certification process
- Monitoring and reporting GLBA certification status
- Archiving GLBA certification history
|
|
Multi-Org management |
- Determination of a global GLBA compliance baseline with mandatory components
- Establishing a workflow for examining local (subsidiary) variants
- Enforcement of enterprise guidelines, regulations and frameworks within subsidiaries
- Control GLBA compliance level both locally (per subsidiary) and globally from a central HQ cockpit
|
|
|
|
The ProcessGene™ GLBA Software UsersThe ProcessGene™ GLBA compliance software provides value to the following users:
- C-level management (CEO, CFO, CIO, CRO, COO)
- Board of directors
- Compliance officers
- Internal auditors
- GLBA compliance managers
Continue to: Related Regulations >
|