GLBA Training Course

Safeguard sensitive financial information to reduce risk exposure and uphold GLBA compliance standards

GLBA Course Description

This course provides an overview of the Gramm-Leach-Bliley Act (GLBA) and its application within higher education, discusses increasing information security risks, and strategies for protecting sensitive data, penalties for non-compliance, and the possible consequences of a data breach.

  • Target Audience: All staff interacting with covered customer financial data
  • Course Length: 25 minutes

GLBA Course Learning Objectives

This training course covers the GLBA Privacy Rule, the Safeguards Rule, and the Pretexting Rule, the required administrative, technical, and physical controls that must be implemented, necessary third-party oversight, and steps to achieve compliance.

Understand how GLBA applies to your organization. Discover best practices for securing and accessing sensitive financial information, how to ensure compliance, and prevent unauthorized access to data.

GLBA Course

GLBA Awareness Course Modules

Our GLBA course is designed with micro-learning modules, making the content easier to retain.

  • Protecting Sensitive Data

    This module provides an overview of GLBA and its application within higher education, discusses increasing information security risks, and strategies for protecting sensitive data, penalties for non-compliance, and the possible consequences of a data breach.
  • Privacy and Safeguards Rule

    This module covers both the GLBA Privacy Rule and the Safeguards Rule, the required administrative, technical, and physical controls that must be implemented, necessary third-party oversight, and steps to achieve compliance.
  • BONUS MODULE: Federal Tax Information (FTI)

    With FTI now provided directly from the IRS for purposes of administering federal aid programs, specifically for use in the Free Application for Federal Student Aid (FAFSA) form, customers need to ensure financial aid staff understand new requirements, restrictions on FTI data use, and best practices for protecting this sensitive data. This supplemental training module guides you through common scenarios and frequently asked questions related to FTI.

online training iconExplore our other courses

Explore our full course library to find training that fits your needs, from security awareness and compliance essentials to specialized topics designed to support your role and responsibilities. Whether you’re looking to strengthen your cybersecurity posture, stay up to date with industry regulations, or broaden your knowledge, we’ve got you covered.

The Latest GLBA Course Updates

We update all courses annually to reflect evolving risks and requirements. Updates to this year’s annual training modules include:
  • Overview of Pretexting Rule
  • Insider Threat Prevention
  • Third-Party Oversight
  • Incident Management and Reporting Requirements
  • Common technical failures, including endpoint management
  • Penalties for non-compliance
  • Updated data breach statistics
  • Implications and common scenarios in Higher Education
  • Updated graphics
Request a Demo

Access Our Resource Library and Threat Intel News

All GLBA Awareness Course users also have access to our Resource Library, which offers supplemental materials that support the course content.

Our Threat Intel Briefing newsletter is sent directly to your inbox twice a month, and features the latest cyber threats, cyber crimes, and vulnerabilities happening now around the globe.

GLBA Videos and Articles

Quote

"When I first became a CIO, the compliance rules related to PCI and GLBA were enough to make my head spin. Thanks to CampusGuard, not only was I able to understand the requirements but they were extremely helpful in improving our processes so that we remained in compliance. The training they provide is so very thorough and has helped to improve our division's understanding of these important regulations."

Nik Varrone

Vice President, Chief Information Officer, Genesee Community College

Protecting Sensitive Financial Data

CampusGuard’s GLBA training course equips your staff with practical strategies for securing sensitive data and outlines clear steps to prevent unauthorized access.

Request a Demo

GLBA Training Frequently Asked Questions

The Gramm-Leach-Bliley Act (GLBA) is a federal law in the US that aims to protect the privacy of consumer financial information by requiring financial institutions to inform customers about their information-sharing practices and to allow customers to opt-out of certain types of information sharing. It also requires financial institutions to establish safeguards to protect the security and confidentiality of customer information. The GLBA applies to a wide range of financial institutions, including banks, securities firms, insurance companies, and other financial service providers. It is enforced by several federal agencies, including the Federal Trade Commission (FTC) and the Federal Reserve Board.
Anyone who handles student financial aid records, payment data, or other nonpublic financial information should take GLBA training. This often includes financial aid staff, IT/security personnel, bursar’s office employees, and third-party vendors with access to sensitive data.
The GLBA applies to a wide range of financial institutions, including:
  • Banks and credit unions
  • Securities firms, including broker-dealers, investment companies, and investment advisors
  • Insurance companies, including life, health, and property and casualty insurers
  • Mortgage brokers, loan servicers, and other non-bank lenders
  • Financial service providers, including check-cashing and money-transmission businesses
  • Any other entity that provides financial products or services to consumer
GLBA applies to both large and small financial institutions, and compliance is required regardless of the size of the institution.
Training ensures staff understand their responsibilities for safeguarding financial data, helps the institution comply with federal regulations, and reduces the risk of data breaches and penalties.
At least annually, though refresher training or targeted sessions may be required when regulations, policies, or technologies change.