A technology provider shall provide a summary to the Department of its most recent IT security audit, which shall not be more than three years old:

1. (1) on its initial and subsequent applications; and
2. (2) on its verification of compliance pursuant to Rule .0211 of this Section, if applicable.

History Note: Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;
Eff. July 1, 2025.