™Your Policy Risk Impact Agent
118 chapters · 1,589 sections in this title.
N.D.C.C. § 26.1-02.2-01 Definitions
4.8K chars
As used in this chapter: 1. "Authorized individual" means an individual known to and screened by the licensee and determined to be necessary and appropriate to have access to the nonpublic information held by the licensee and the licensee's information systems. 2. "Commissioner" …
N.D.C.C. § 26.1-02.2-02 Exclusive regulation
0.2K chars
Notwithstanding any other provision of law, this chapter establishes the exclusive state standards applicable to licensees for data security, the investigation of a cybersecurity event, and notification to the commissioner.
N.D.C.C. § 26.1-02.2-03 Information security program
9.4K chars
1. Commensurate with the size and complexity of the licensee, the nature and scope of the licensee's activities, including the licensee's use of third-party service providers, and the sensitivity of the nonpublic information used by the licensee or in the licensee's possession, c…
N.D.C.C. § 26.1-02.2-04 Investigation of a cybersecurity event
1.4K chars
1. If a licensee learns a cybersecurity event has or may have occurred, the licensee, an outside vendor, or service provider designated to act on behalf of the licensee, shall conduct a prompt investigation. 2. During the investigation, the licensee or an outside vendor or servic…
