Industry Solutions: For Financial Institutions



Challenge: Establishing security safeguards and ensuring protection of consumer's personal data.


A major challenge for financial institutions is meeting the mandates of the Gramm Leach Bliley Act (GLBA). The GLBA was enacted by Congress and dictates that financial organizations "protect the security, integrity, and confidentiality of consumer information."

Section 501(b) of the GLBA states that organizations must "establish appropriate standards for the financial institutions subject to their jurisdiction relating to administrative, technical, and physical safeguards:

  • To insure the security and confidentiality of customer records and information;
  • To protect against any anticipated threats or hazards to the security or integrity of such records; and
  • To protect against unauthorized access to, or use of, such records or information which could result in substantial harm or inconvenience to any customer."


QRadar for Financial Institutions

QRadar delivers a centralized command and control approach that lets organizations implement IT security best practices that are mandated by the GLBA. QRadar's network security management capabilities provide the requisite surveillance and intelligence necessary to detect and mitigate threats to IT assets that, if undetected, would compromise the confidentiality of customer information.

Additionally, QRadar enables security controls that are essential to financial organizations, including log management and compliance-focused monitoring, network behavior analysis, correlation reporting, and auditing.

QRadar in Action: Real World Deployments

  • QRadar is used by multiple hedge funds to deliver enterprise-wide log management, threat management, and compliance reporting and auditing
  • QRadar is used by multiple local, national, and international banking institutions to meet a broad spectrum of regulations, including GLBA, Sarbanes-Oxley (SOX), and Payment Card Industry (PCI)
  • QRadar is used by multiple insurance companies to deliver centralized network security management to better protect sensitive consumer information


Related link:

How QRadar Addresses Regulatory Compliance Requirements:
Rationalizing Compliance Requirements Amid the Hype