31 Pa. Code § 146c.5
The actions and procedures described in § § 146c.6—146c.9 are examples of methods of implementation of the requirements of § § 146c.3 and 146c.4 (relating to information security program; and objectives of information security program). These examples are nonexclusive illustrations of actions and procedures that licensees may follow to implement § § 146c.3 and 146c.4.