For insurers, the bill mandates the development of a comprehensive written information security program tailored to the size, complexity, and risk profile of the organization. Each licensee must conduct periodic risk assessments, designate responsible personnel, and implement administrative, technical, and physical safeguards to protect non-public information. Insurers domiciled in Oklahoma are required to submit an annual compliance certification to the Insurance Commissioner by April 15 and retain supporting records for five years.