Each registrant shall establish a cybersecurity program designed to ensure the confidentiality, integrity and availability of information systems that perform cybersecurity functions. Functions include identification of cyber risks; implementation of policies and procedures to protect unauthorized access or use or other malicious acts; detection of cybersecurity events; responsiveness to identified cybersecurity events to mitigate any negative events and recovery from cybersecurity events and restoration of normal operation and services.
10 Del. Admin. Code § 301-13.0