compliance assessment and represents a combination of steps suggested by the language of GLBA Section 501(b), interpretive memos and documents produced by regulators, and BankInfoSecurity.com's ...