4. A financial institution or a credit assessment agent must assign, in writing, responsibility for monitoring the management and reporting of information security incidents to one of its officers or, in the case of a financial services cooperative, one of its managers.
2024-13A.M. 2024-13, s. 4.