ContactRequest a demo

Success Story

Shared Services Setup of Key and Non-Key GLBA Control Testing for a US-Based Regional and Community Bank

Client Introduction

A leading US-based Regional and Community bank of USD 122 billion in asset size that offers services to retail consumers, corporations, and non-profits through traditional and digital banking.

Problem Statement

The bank had a deadline to complete the testing of key controls for the Gramm-Leach-Bliley Act (GLBA) before the internal due date to meet MRIA requirements and establish a Shared Services Setup for ongoing testing as a part of the exercise.

Solution Offered

  • Leveraged our Talent Acquisition engine accelerated by ClearedTalent™ to hire professionals from a pre-vetted talent community.
  • Completed the staffing of ~25 qualified control testers, supervisors, and managers with hands-on expertise and proficiency in testing the IT and operations controls and upskilled them within the timeline.
  • Coordinated with Control Owners to review each control’s evaluation against ECMP requirements and determined the controls.
  • Conducted Quality Control (QC) before testing based on the feedback received from Control Owners.
  • Determined control adequacy and evidence.
  • Developed a customized randomizer tool for sampling the controls.
  • Conducted GLBA peer-to-peer QA testing on 50% of the controls enabled by pre-defined QA checklists to demonstrate performance attributability.

Key requirements:

  • Hire a team of ~25 qualified testers, supervisors, and managers in 3-4 weeks based in Atlanta, GA.
  • Onboard and train the team in one week.
  • Help control owners review controls, draft control descriptions, test the scripts, and make decisions.
  • Test ~150 key GLBA and non-key controls as a part of the 1 st line-of-defense (information technology ITO and operations controls).
  • Conduct the test of design, including the test of one.
  • Conduct the test of effectiveness.
  • Management reporting to the stakeholders.
  • Review and provide recommendations on the Enterprise Control Management Program (ECMP) – IT document.

Business Outcomes

  • Successfully met the internal audit obligations and established Shared Services setup.
  • Tagged <strong>52 GLBA controls</strong> for retirement within the first 60 days
  • Continual updating of&nbsp;<strong>ECMP document and</strong>&nbsp;QA/QC methodology.
  • Leveraged best practices from a Shared Services and Enterprise Risk Management perspective, such as:
  • <strong>Knowledge dissemination</strong> is based on existing digital knowledge repositories powered by <strong>Fluent</strong> <em>(proprietary digital knowledge management solution).</em>
  • <strong>Reporting of Service Levels</strong> as well as Control Effectiveness measures amongst others through <strong>Factum</strong> <em>(proprietary digital dashboarding system).</em>
  • <strong>Optimization of Control Testing</strong> and subsequent digitization by “Overlap Identification” and subsequent <strong>RPA implementation</strong> <strong>powered by Uipath</strong> – <strong>~ 10 % efficiency benefits</strong> through Non-Value Add elimination in the testing processes.

Ready to Transform your Operations

From strategy and solution design to enterprise deployment and managed operations, Anaptyss helps organizations turn AI ambitions into trusted, scalable business capabilities.

Get in Touch