<html> <head> <title>Rule 20:06:45:24 Manage and control risk.</title> <META NAME="Keywords" Content="Administrative Rules 20:06:45:24"> <META NAME="Description" Content="Administrative Rules 20:06:45:24 Manage and control risk."> <meta name=Generator content="Microsoft Office HTML Filter 2.0"> <meta http-equiv=Content-Type content="text/html; charset=windows-1252"> <meta name=Originator content="Microsoft Word 10"> <style> <!-- --> </style> </head> <body lang=EN-US> <div> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>20:06:45:24.&nbsp;&nbsp;Manage and control risk.</b> The licensee:</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (A)&nbsp;&nbsp;Designs its information security program to control the identified risks, commensurate with the sensitivity of the information, as well as the complexity and scope of the licensee's activities;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (B)&nbsp;&nbsp;Trains staff, as appropriate, to implement the licensee's information security program; and</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (C)&nbsp;&nbsp;Regularly tests or otherwise regularly monitors the key controls, systems, and procedures of the information security program. The frequency and nature of these tests or other monitoring practices are determined by the licensee's risk assessment.</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Source:</b> 29 SDR 48, adopted September 20, 2002, effective March 1, 2003; 31 SDR 67, effective November 14, 2004.</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>General Authority:</b> SDCL <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-40">58-2-40</A>, <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-41">58-2-41.</A></p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Law Implemented:</b> SDCL <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-40">58-2-40</A>, <A HREF="/statutes/DisplayStatute.aspx?Type=Statute&Statute=58-2-41">58-2-41.</A></p> </div> </body> </html>