1

  1. Any employee that engages in the mortgage lending process at an alternate work location accesses the company's secure systems, including a cloud-based system, directly from any out-of-office device via a virtual private network (VPN) or a comparable system that ensures secure connectivity and requires passwords or other forms of authentication to access;
  2. Appropriate security updates, patches, or other alterations to the security of all devices used at an alternate work location are installed and maintained;
  3. Any employee that engages in the mortgage lending process at an alternate work location agrees to comply with the licensee's processes established under paragraph (d) of this subsection; and
  4. The Nationwide Multistate Licensing System and Registry record of a mortgage loan originator that works from an alternate work location designates a properly licensed location as the mortgage loan originator's official work station;
  5. Have the ability to:
  6. Remotely lock or erase company-related contents of any device; or
  7. Otherwise remotely limit all access to the company's secure systems; and
  8. At least annually:
  9. Certify that all employees engaged in the mortgage lending process at alternate work locations meet the appropriate standards and safeguards to continue engaging in the mortgage lending process from the alternate work locations; and
  10. Review each alternate work location and provide proof of the documented review to the department upon request.
  11. KRS 286.8-046 states.
  12. The commissioner may levy a civil penalty against any person who violates any provision of or any administrative regulation promulgated under this subtitle or order issued by the commissioner under this subtitle. The civil penalty shall be not less than one thousand dollars ($1,000) nor more than twenty-five thousand dollars ($25,000) per violation, plus the state's costs and expenses for the examination, investigation, and prosecution of the matter, including reasonable attorney's fees and court costs.
  13. The commissioner may order restitution, refund, recovery of expenses, or direct such other affirmative action as the commissioner deems necessary against any person who

Page 4 of 8