Rule 9. To adjust its program, a licensee monitors, evaluates, and adjusts, as appropriate, the information security program in light of any relevant changes in technology, the sensitivity of its customer information, internal or external threats to information, and the licensee's own changing business arrangements, such as mergers and acquisitions, alliances, and joint ventures, outsourcing arrangements and changes to customer information systems.
Mich. Admin. Code R. 500.559