A licensee monitors, evaluates, and adjusts, as appropriate, the information security program in light of any relevant changes in technology, the sensitivity of its customer information, internal or external threats to information, and the licensee's own changing business arrangements, such as mergers and acquisitions, outsourcing arrangements, and changes to customer information systems.
Cal. Code Regs. Tit. 10, § 2689.19
Note: Authority cited: Sections 791- 791.27, Insurance Code; and 15 U.S.C. Sections 6801, 6805, 6807 and 6824. Reference: Section 791, Insurance Code; and 15 U.S.C. Section 6825.