<html> <head> <title>Rule 20:06:45:21 Objectives of information security program.</title> <META NAME="Keywords" Content="Administrative Rules 20:06:45:21"> <META NAME="Description" Content="Administrative Rules 20:06:45:21 Objectives of information security program."> <meta name=Generator content="Microsoft Office HTML Filter 2.0"> <meta http-equiv=Content-Type content="text/html; charset=windows-1252"> <meta name=Originator content="Microsoft Word 10"> <style> <!-- --> </style> </head> <body lang=EN-US> <div> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>20:06:45:21.&nbsp;&nbsp;Objectives of information security program.</b> A licensee's information security program shall be designed to:</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (A)&nbsp;&nbsp;Ensure the security and confidentiality of customer information;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (B)&nbsp;&nbsp;Protect against any anticipated threats or hazards to the security or integrity of the information; and</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (C)&nbsp;&nbsp;Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Source:</b> 29 SDR 48, adopted September 20, 2002, effective March 1, 2003; 31 SDR 67, effective November 14, 2004.</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>General Authority:</b> SDCL <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-40">58-2-40</A>, <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-41">58-2-41.</A></p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Law Implemented:</b> SDCL <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-40">58-2-40</A>, <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-41">58-2-41.</A></p> </div> </body> </html>