1. (1) The licensee:

   1. (a) exercises appropriate due diligence in selecting its service providers; and
   2. (b) requires its service providers to implement appropriate measures designed to meet the objectives of this rule, and where indicated by the licensee's risk assessment, takes appropriate steps to confirm that its service providers have satisfied these obligations.

Authorizing statute(s): 33-19-106, MCA

Implementing statute(s): 33-19-102 and 33-19-306, MCA

History: NEW, 2005 MAR p. 426, Eff. 4/1/05.