R590-216-4. Information Security Program

(1) A licensee shall implement a comprehensive written information security program including administrative, technical, and physical safeguards to protect customer information. (2) The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the licensee and the nature and scope of its activities.