Legislation: North Dakota Bill Imposes Licensed Insurer Security and Breach Obligations

If passed, licensees must develop, implement, and maintain a risk assessment program that manages cybersecurity events (such as unauthorized access to, or misuse of an information system), design an information security program that contains safeguards appropriate to the size and complexity of the licensee and their activities, and report to the Board, at least annually, the overall status of the information security program.