Are there specific shredding requirements for financial institutions to comply with when shredding confidential info ( i.e. customer info)? What type of method should be used ? (i.e. strips length, strips vs crosscut, size of shred pieces, etc.)

Bump

I prefer julienne.

I like a small dice myself.

I just googled around looking for any agency guidance on document destruction and couldn't find anything. As far as I know, there are no requirements for the method used for shredding.

GLBA section 501(b) governs this and is pretty broad and vague. There are several interpretations readily available, including the FFIEC IT Examination Handbook. Nothing that tells you "must be a crosscut shredder" or anything that specific. Historically, my examiners and auditors have asked about and strongly recommended using the best quality shredding we can and to include what type of shredding we are using in our risk assessment as a mitigating factor.