{"id":489,"date":"2012-06-12T02:27:48","date_gmt":"2012-06-12T09:27:48","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=489"},"modified":"2019-04-20T16:25:35","modified_gmt":"2019-04-20T16:25:35","slug":"the-basics-of-the-glb-acts-safeguards-rule","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=489","title":{"rendered":"The basics of the GLB Act&#039;s Safeguards Rule"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[The Safeguards Rule, which implements Section 501(b) of the GLB Act, 15 U.S.C. \u00a7 6801(b), requires financial institutions to p<span style=\"text-decoration: underline;\">rotect the security, confidentiality, and integrity of customer information<\/span> by developing a <span style=\"text-decoration: underline;\">comprehensive written information security program<\/span> that contains reasonable administrative, technical, and physical safeguards, including: (1) <span style=\"text-decoration: underline;\">designating one or more employees to coordinate<\/span> the information security program; (2) <span style=\"text-decoration: underline;\">identifying<\/span> reasonably foreseeable internal and external<span style=\"text-decoration: underline;\"> risks to the security<\/span>, confidentiality, and integrity of customer information,\u00a0 and <span style=\"text-decoration: underline;\">assessing the sufficiency of any safeguards<\/span> in place to control those risks; (3) <span style=\"text-decoration: underline;\">designing and implementing information safeguards<\/span> to control the risks identified\u00a0 through risk assessment, and <span style=\"text-decoration: underline;\">regularly testing<\/span> or otherwise <span style=\"text-decoration: underline;\">monitoring the effectiveness<\/span> of the safeguards\u2019 key controls, systems, and procedures; (4) overseeing\u00a0 service providers and requiring them <span style=\"text-decoration: underline;\">by contract to protect the security and confidentiality<\/span> of customer information; and (5) evaluating and <span style=\"text-decoration: underline;\">adjusting the\u00a0 information security program<\/span> in light of the results of testing and monitoring, changes\u00a0 to the business operation, and other relevant circumstances. <a title=\"electronic Code of Federal Regulations\" href=\"http:\/\/ecfr.gpoaccess.gov\/cgi\/t\/text\/text-idx?c=ecfr&amp;sid=4277b2053434e1e606a01dfc36d338e6&amp;rgn=div5&amp;view=text&amp;node=16:1.0.1.3.38&amp;idno=16\" target=\"_blank\" rel=\"noopener noreferrer\">16 C.F.R. \u00a7\u00a7 314.3<\/a> and\u00a0 314.4.\u00a0 Violations of the Safeguards Rule are enforced through the <a title=\"SAFE Act\" href=\"http:\/\/www.gpo.gov\/fdsys\/pkg\/BILLS-112hr2577ih\/pdf\/BILLS-112hr2577ih.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">FTC Act. 15 U.S.C. \u00a7 6805(a)(7)<\/a>.]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[63,67],"tags":[],"class_list":["post-489","post","type-post","status-publish","format-standard","hentry","category-education","category-practices"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=489"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/489\/revisions"}],"predecessor-version":[{"id":8136,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/489\/revisions\/8136"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}