The licensee monitors, evaluates and adjusts, as appropriate, the information security program in light of any relevant changes in technology, the sensitivity of its customer information, internal or external threats to information, and the licensee's own changing business arrangements, such as mergers and acquisitions, alliances and joint ventures, outsourcing arrangements and changes to customer information systems.
31 Pa. Code § 146c.9
This section cited in 31 Pa. Code § 146c.5 (relating to examples of methods of development and implementation).