NAIC Insurance Data Security Model Law (MDL-668) 4C(5): Implement safeguards and assess key controls at least annually

The Licensee puts information safeguards in place to handle the threats that its continuing assessment identifies, and at least once a year it assesses how effective the key controls, systems and procedures of those safeguards are.