Investor Presentaiton
KEY DEFINITIONS | Cybersecurity Event |§ 38-99-10
Cybersecurity event: an event resulting
in unauthorized access to, disruption or
misuse of, an information system or
information stored on such information
system.
Safe Harbors. It does not include:
-
The unauthorized acquisition of
encrypted nonpublic information IF
the encryption, process or key is not
also acquired, released or used
without authorization.
An event where the licensee has
determined that nonpublic
information accessed by an
unauthorized person has not been
used or released and has been
returned or destroyed.
Information System: a discrete set of electronic
information resources organized for the
collection, processing, maintenance, use,
sharing, dissemination or disposition of
electronic information, as well as any
specialized system such as industrial or process
controls systems, telephone switching and
private branch exchange systems, and
environmental control systems.
Note:
Cybersecurity events under the law involve
electronic records and systems only.
Unauthorized access to encrypted information is
NOT a cybersecurity event.
A power outage or other benign cause of a
disruption is not a cybersecurity event unless
unauthorized access to NPI results.View entire presentation