The actions and procedures described in §§ 146c.6-146c.9 are examples of methods of implementation of the requirements of §§ 146c.3 and 146c.4 (relating to information security program; and objectives of information security program). These examples are nonexclusive illustrations of actions and procedures that licensees may follow to implement §§ 146c.3 and 146c.4.
31 Pa. Code § 146c.5