SECTION 365:35-3-6. Assess risk  


Latest version.
  •   The licensee:
    (1)   Identifies reasonably foreseeable internal or external threats that could result in unauthorized disclosure, misuse, alteration or destruction of customer information or customer information systems;
    (2)   Assesses the likelihood and potential damage of these threats, taking into consideration the sensitivity of customer information; and
    (3)   Assesses the sufficiency of policies, procedures, customer information systems and other safeguards in place to control risks.
[Source: Added at 22 Ok Reg 2059, eff 7-14-05]