Objectives of the

[§431:3B-202] Objectives of the information security program; risk assessment. (a) A licensee's information security program shall be designed to:

(b) Regarding risk assessment, the licensee shall: