Management develops and the board approves an information security program that protects the security and confidentiality of customer information as the Information Security Standards under GLBA require, protecting it from threats to security or integrity and from unauthorised access or use that would cause substantial harm or inconvenience to a customer, and the board reviews annually a written management report on the institution's GLBA compliance actions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.