Delaware Administrative Code
Title 18 - Insurance
900 - Consumer Rights
905 - Standards for Safeguarding Customer Information
Section 905-6.0 - Assess Risk

6.1 Identifies reasonably foreseeable internal or external threats that could result in unauthorized disclosure, misuse, alteration or destruction of customer information or customer information systems;

6.2 Assesses the likelihood and potential damage of these threats, taking into consideration the sensitivity of customer information; and

6.3 Assesses the sufficiency of policies, procedures, customer information systems and other safeguards in place to control risks.