Cybersecurity Locks

Cybersecurity Resource Center

Designed to help covered entities comply with the requirements of the Cybersecurity Regulation
Cybersecurity FAQs
Submissions
Cybersecurity at Financial Services Companies in New York
Cybersecurity Requirements

On March 1, 2017, DFS promulgated its first-in-the-nation cybersecurity regulation, 23 NYCRR Part 500, establishing cybersecurity requirements for financial services companies. The DFS Cybersecurity Resource Center helps Covered Entities understand how to comply with the requirements of the Cybersecurity Regulation.

Note: The Cybersecurity Regulation defines certain terms in Section 500.1. These terms are capitalized throughout this Cybersecurity Resource Center and have the meanings assigned to them in the Cybersecurity Regulation. All “Section” references are to the Cybersecurity Regulation.

Covered Entities and Requirements
Who Must Comply?

Any individual or organization operating under or required to operate under a license, registration, charter, certificate, permit, accreditation or similar authorization under the Banking Law, the Insurance Law or the Financial Services Law, regardless of whether the individual or entity is also regulated by other government agencies.

Am I Exempt?
What is Required?

Covered Entities must implement and maintain risk-informed cybersecurity policies and programs. Specific requirements are set forth in 23 NYCRR Part 500.

What is Required?

Cybersecurity Resources Resources for Covered Entities to Assist with Compliance

Cybersecurity Examination and Supervision
To safeguard financial services organizations and protect the confidential information of New Yorkers, DFS uses a multi-pronged, risk-based approach to monitor cybersecurity and information technology risk.
Stay in Touch
Stay Informed with News and Information Related to Cybersecurity
Stay up-to-date with Department guidance, updates and alerts related to cybersecurity - including threat alerts, press releases, and informative newsletters. Use our GovDelivery Quick Subscribe page to sign up for email updates or to manage your subscriber preferences.

Featured Guidance Important Recent News and Guidance

Cybersecurity-Related Guidance, Enforcement Actions and Reports
95 Results Found
Filter