AUTHORITY: Implementing Article XXVI and Article XL of the Illinois Insurance Code [215 ILCS 5/Arts. XXVI and XL], and Title V of the Gramm-Leach-Bliley Act (15 USC 6801 through 6827) and authorized by Section 401 and Article XL of the Illinois Insurance Code [215 ILCS 5/401 and Art. XL].DEPARTMENT OF INSURANCE SUBCHAPTER tt: INSURANCE INFORMATION AND PRIVACY PROTECTION
a) Identifies reasonably foreseeable internal or external threats that could result in unauthorized disclosure, misuse, alteration or destruction of customer information or customer information systems;
b) Assesses the likelihood and potential damage of these threats, taking into consideration the sensitivity of customer information; and
c) Assesses the sufficiency of policies, procedures, customer information systems and other safeguards in place to control risks.