Too frequently, we hear of data breaches caused because of inadequate training on GLBA. Employees will often mistakenly send confidential customer data such as Social Security Numbers or other sensitive information in an email without realizing that the data needs to be encrypted. There are a variety of avenues through which confidential or sensitive information can be breached internally by employees, including corporate email systems used on desktops, laptops, mobile devices and home computers. The steps a bank needs to take to ensure a sound GLBA compliance program include:Board oversight and top down communication; sound policies and procedures.”]
Source: https://www.bankinfosecurity.com/glba-compliance-make-or-break-career-in-bankingsecurity-a-925