18 ncac 07j .0619          vulnerability detection and remediation

A technology provider shall:

(1)           at least weekly execute or cause to be executed a third party security program which shall evaluate each system endpoint for indications of malware, known security risks, and other vulnerabilities; and

(2)           detect and remediate IT security vulnerabilities.

History Note:        Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;

Eff. July 1, 2025.