Internal controls
Compiled text through Sep 15, 2021
Register checked through Jul 29, 2026
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Executive Department
- Text status
- Source receipt
- Compiled text through
- Sep 15, 2021
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Latest notice
- SGC-17-18-00002-A · Adopted rule · Apr 10, 2019
- Source snapshot
- Jun 6, 2026
Each courier service shall submit to the commission for approval a written description of its initial system of internal controls prior to the start of operations. Such system of internal controls shall demonstrate to the satisfaction of the commission that such courier service has adequate controls in place to address data security, responsiveness to cybersecurity events to mitigate any negative events, recovery from cybersecurity events and restoration of normal operations and services, risk assessment and mitigation, training, access controls and identity management, systems operations and availability concerns, courier customer data privacy, incident response, disaster recovery, document retention and any other control issue the commission may identify.