Indiana § 27-2-27-17 - Risk assessment; requirements
Full text of Indiana Indiana Code § 27-2-27-17 — Risk assessment; requirements, with citation guidance and answers to common questions.
§ 27-2-27-17. Risk assessment; requirements
Sec. 17. A licensee shall conduct a risk assessment of its information systems and treatment of nonpublic information by doing the following:
(1) Designating one (1) or more employees, an affiliate, or an outside vendor designated to act on behalf of the licensee information security program.
(2) Identifying reasonably foreseeable internal or external threats that could result in a cybersecurity event, including threats to information systems and nonpublic information held or accessed by third party service providers.
(3) Assessing the likelihood and potential damage of the threats identified in subdivision (2), taking into consideration the sensitivity of the nonpublic information.
(4) Assessing the sufficiency of the policies, procedures, information systems, and other safeguards currently in place to manage the threats identified in subdivision (2), including an assessment of threats in each relevant area of the licensee's operations, including the following:
(A) Employee training and management.
(B) Information systems, including network and software design, and information classification, governance, processing, storage, transmission, and disposal.
(C) Procedures for detecting, preventing, and responding to cybersecurity events or other systems failures.
(5) Implementing information safeguards to manage the threats identified under subdivision (2), and assessing the effectiveness of the safeguards' key controls, systems, and procedures at least one (1) time each year.
As added by P.L.130-2020, SEC.10.
Source: official Indiana text · Last verified 2026-08-27
Frequently Asked Questions About Indiana § 27-2-27-17
What does Indiana Code § 27-2-27-17 cover?
Section 27-2-27-17 ("Risk assessment; requirements") is part of the Indiana Code, the codified statutory law of Indiana. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Indiana § 27-2-27-17?
A common citation format is "Indiana Code § 27-2-27-17" (Indiana). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Indiana law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Indiana official source linked on this page or consult a licensed Indiana attorney.
How does Indiana § 27-2-27-17 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Indiana can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Indiana.