Examination Procedures to Evaluate Compliance with the Guidelines to Safeguard Customer Information

Gramm-Leach-Bliley Act (GLBA)Office of the Comptroller of the Currency (OCC)Identity Theft

These examination procedures are derived from the interagency Guidelines Establishing Standards for Safeguarding Customer Information, as mandated by Section 501(b) of the Gramm-Leach-Bliley Act of 1999. The guidelines address standards for developing andimplementing administrative, technical, and physical safeguards to protect the security,confidentiality, and integrity of customer information.

The guidelines require each institution to implement a comprehensive written informationsecurity program that includes administrative, technical, and physical safeguards appropriate tothe size and complexity of the institution and the nature and scope of its activities. While allparts of the institution are not required to implement a uniform set of policies, all elements of theinformation security program must be coordinated.

> Read entire regulation (log in required - registration is free)