R590-216-5. Objectives of Information Security Program

A licensee's information security program shall: (1) ensure the security and confidentiality of customer information; (2) protect against any anticipated threat or hazard to the security or integrity of the information; and (3) protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.