Ark. Code Ann. § 23-55-609: Policy and procedure - Physical security and cybersecurity

(a) A money transmitter or currency exchanger licensed or required to be licensed under this chapter shall establish, implement, update, and enforce written physical security and cybersecurity policies and procedures reasonably designed to ensure the confidentiality, integrity, and availability of physical and electronic records and information.

(b) A policy or procedure described in subsection (a) of this section shall be tailored to the size and sophistication of the money transmitter or currency exchanger.

(c) The Securities Commissioner may impose additional conditions by rule or order to clarify the requirements of a policy or procedure described in subsection (a) of this section.