A technology provider shall maintain a configuration management plan for systems supporting the electronic notary solution that addresses:
(1) maintenance of an accurate inventory of items including:
- (a) software;
- (b) hardware; and
- (c) network components;
- (2) implementation of configuration settings which represent the most restrictive security settings compatible with the systems' operational requirements;
- (3) use of automated mechanisms to detect inventory and configuration changes;
- (4) prevention of unauthorized changes to the systems; and
- (5) evaluation of the potential security impact of proposed changes.
History Note: Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;
Eff. July 1, 2025.