Âé¶¹´«Ã½ÍŶÓ


GLBA Information Security Program Policy

Policy Information
Policy Type Information Technology
Policy Number: 9.1.7
Date Policy Issued: April 01, 2023

Policy Owner: Chief Information Officer

Policy Statement:

GLBA mandates that the Institute appoint an Information Security Program Coordinator, conduct a risk assessment of likely security and privacy risks, institute a training program for all employees who have access to covered data and Information, oversee service providers and contracts, and evaluate and adjust the Information Security Program periodically.

Policy Rational:

This Information Security Plan describes Âé¶¹´«Ã½ÍÅ¶Ó safeguards to protect covered data and Information in compliance with the FTC’s Safeguards Rule promulgated under the Gramm Leach Billey Act (GLBA).

Full PDF of Policy


Chat