Regulation and Amendments
- Copy of Regulation 23 NYCRR Part 500 (PDF)
Training Presentations
To help Covered Entities plan for compliance, the Department has developed the following Part 500 resources:
Compliance Tools
Detailed Submission Instructions
-
Cybersecurity Instructions: How to Report a Cybersecurity Incident
Detailed printable instructions for how to report a cybersecurity incident via the DFS Portal
Download
-
Cybersecurity Instructions: How to Report an Extortion Payment
Detailed printable instructions on how to report an Extortion Payment via the DFS Portal
Download
-
Cybersecurity Instructions: How to Submit or Amend a Notice of Exemption
Detailed printable instructions on how to submit or Amend a Notice of Exemption via the DFS Portal
Download
-
Cybersecurity Instructions: How to Terminate a Notice of Exemption
Detailed printable instructions on how to terminate a Notice of Exemption via the DFS Portal
Download
-
Cybersecurity Instructions: How to Submit an Acknowledgment of Noncompliance for Individual Licensees
Detailed printable instructions for individual licensees on how to submit an acknowledgement of noncompliance via the DFS portal.
Download
-
Cybersecurity Instructions: How to Submit an Acknowledgment of Noncompliance for Entities
Detailed printable instructions for Entities on how to submit an Acknowledgment of Noncompliance via the DFS Portal
Download
-
Cybersecurity Instructions: How to Submit a Certification of Material Compliance for Individual Licensees
Detailed printable instructions for individual licensees on how to submit a Certification of Material Compliance via the DFS Portal
Download
-
Cybersecurity Instructions: How to Submit a Certification of Material Compliance for Entities
Detailed printable instructions for entities on how to submit a Certification of Material Compliance via the DFS Portal
Download
Video Refreshers
DFS Cybersecurity Regulation Refresher: Cybersecurity Awareness Training
DFS Cybersecurity Regulation Refresher: Multi-Factor Authentication
DFS Cybersecurity Regulation Refresher: Encryption Requirements
DFS Cybersecurity Regulation Refresher: Enhanced Governance Requirements
DFS Cybersecurity Regulation Refresher: Incident Response & Business Continuity and Disaster Recovery Plans
DFS Cybersecurity Regulation Refresher: Incident Response & Business Continuity and Disaster Recovery Plans
DFS Cybersecurity Regulation Refresher: Monitoring
Outside Resources
- Department of Homeland Security, Cybersecurity and Infrastructure Agency (CISA)
- Small Business Administration (SBA)
- Cyber Readiness Institute
- Global Cyber Alliance (GCA) Cybersecurity Toolkits
- New York State's Office of Information Technology Services' Cybersecurity Advisories
- The Known Exploited Vulnerabilities Catalog