GLBA / FFIEC Assessment
E Com Security Solutions help financial institutions to safeguard customers’ and members’ personal financial information and to meet with GLBA/FFIEC compliance requirements.
GLBA / FFIEC Assessment Overview
The Gramm-Leach-Bliley Act (GLBA) of 1999 first established a requirement to protect consumer financial information. Financial services regulations on information security, initiated by the GLBA, require financial institutions in the United States to create an information security program to protect the security, confidentiality, and integrity of such information. The Federal Financial institutions Examination Council (FFIEC) supports this mission by providing extensive, evolving guidelines for compliance.
E Com Security Solutions GLBA Assessment provides a comprehensive review and analysis of all the major information technology areas recommended by the FFIEC and require financial institution to:
- Identify all current and foreseeable risks and vulnerabilities in IT systems and data storage, assess likelihood and impact of threats, and assess sufficiency of controls to mitigate the risks.
- Design and implement a risk management plan to mitigate those risks
- Implement process and technical safeguards for consumer data storage and access
E Com Security Solutions provide a SOC 2 Type 2 Report of GLBA Assessment on the security controls aligned with FFIEC guidelines for the testing GLBA requirements.
Address Gaps and Vulnerabilities
In-depth manual application testing to secure your internal or third-party developed applications and APIs.
Identify, prioritize and remediate vulnerabilities across mission critical Web Applications and API’s.
On demand managed static / source code vulnerability analysis to help developers build secure software.
On demand cloud based mobile app security assessment from device to network communications to server.
Cloud based solution to identify vulnerabilities in systems, network devices, applications and databases on the network.
Expert based attack simulation to exploit vulnerabilities in systems, network devices, applications and databases on the network.
Gain visibility on configuration and access lists to secure, optimize and comply with regulations.
Identify security risks in all stages of cloud deployments from initial evaluation and architecture to ongoing assessments and testing.