The GLBA Safeguards Rule requires financial institutions to implement a written information security program with administrative, technical, and physical safeguards for customer financial information. The updated Rule requires MFA, encryption, access controls, vulnerability assessments, and a designated security officer. Pantheon helps implement and document all required technical safeguards.

Pantheon supports FDIC IT exam readiness by maintaining current documentation of your IT environment, ensuring technical controls are implemented and evidenced, tracking remediation of prior exam findings, and providing reporting that examiners can review.

Regulators commonly require: MFA on all administrative and remote access, endpoint detection and response (EDR), email filtering, encrypted data storage and transmission, tested and documented backup and recovery, documented and tested incident response plan, employee security training, vulnerability scanning, and vendor risk documentation.

A cybersecurity risk assessment identifies threats, evaluates likelihood and impact, and documents controls in place. For financial institutions, a current risk assessment is a regulatory expectation and a core component of GLBA Safeguards Rule compliance. Pantheon conducts and documents these assessments as part of its vCIO and Advanced Security services.

GLBA and FDIC guidance require financial institutions to assess and manage the security risks of third-party vendors. Pantheon’s vCIO services include vendor documentation, security questionnaire review, and tracking of vendor relationships to support your third-party risk management program.

Financial institutions must notify their primary federal regulator within 36 hours of discovering a computer security incident that materially disrupts operations or impacts customers (per the FDIC/OCC/Federal Reserve notification rule). Pantheon’s incident response plan helps clients identify, contain, and document incidents quickly.

Pantheon serves community banks, credit unions, mortgage companies, financial advisors, insurance firms, and other financial services organizations with 10 or more employees across Southern Minnesota.