20:06:45:21Objectives of information security program.

A licensee's information security program shall be designed to: (A) Ensure the security and confidentiality of customer information; (B) Protect against any anticipated threats or hazards to the security or integrity of the information; and (C) Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.

Source: 29 SDR 48, adopted September 20, 2002, effective March 1, 2003; 31 SDR 67, effective November 14, 2004.