Cybersecurity Locks

Cybersecurity Resource Center

Designed to help covered entities comply with the requirements of the Cybersecurity Regulation
Cybersecurity FAQs
Submissions
Cybersecurity at Financial Services Companies in New York
Cybersecurity Requirements

On March 1, 2017, DFS promulgated its first-in-the-nation cybersecurity regulation, 23 NYCRR Part 500, establishing cybersecurity requirements for financial services companies. The DFS Cybersecurity Resource Center helps Covered Entities understand how to comply with the requirements of the Cybersecurity Regulation.

Note: The Cybersecurity Regulation defines certain terms in Section 500.1. These terms are capitalized throughout this Cybersecurity Resource Center and have the meanings assigned to them in the Cybersecurity Regulation. All “Section” references are to the Cybersecurity Regulation.

Join Us on October 19th
DFS Webinar: How to Submit the Annual Part 500 Compliance Notification

DFS’s Cybersecurity Regulation helps protect New York’s financial services institutions and consumers. Compliance is a critical component to safeguarding the financial system, and DFS is committed to ensuring regulated entities comply with all part of the Cybersecurity Regulation, including submission of the Annual Compliance Notification.  

On October 19 at 1:00pm, DFS will host a webinar on complying with the Annual Compliance Notification. Register for the Webinar on Webex

Visit Cybersecurity Submissions to learn more about how to to submit a Certification of Material Compliance or Acknowledgment of Noncompliance, and to access detailed instructions, FAQs, and a video outlining the process.

Covered Entities and Requirements
Who Must Comply?

Any individual or organization operating under or required to operate under a license, registration, charter, certificate, permit, accreditation or similar authorization under the Banking Law, the Insurance Law or the Financial Services Law, regardless of whether the individual or entity is also regulated by other government agencies.

Am I Exempt?
What is Required?

Covered Entities must implement and maintain risk-informed cybersecurity policies and programs. Specific requirements are set forth in 23 NYCRR Part 500.

What is Required?

Cybersecurity Resources Resources for Covered Entities to Assist with Compliance

Cybersecurity Examination and Supervision
To safeguard financial services organizations and protect the confidential information of New Yorkers, DFS uses a multi-pronged, risk-based approach to monitor cybersecurity and information technology risk.
Stay in Touch
Stay Informed with News and Information Related to Cybersecurity
Stay up-to-date with Department guidance, updates and alerts related to cybersecurity - including threat alerts, press releases, and informative newsletters. Use our GovDelivery Quick Subscribe page to sign up for email updates or to manage your subscriber preferences.

Featured Guidance Important Recent News and Guidance

Cybersecurity-Related Guidance, Enforcement Actions and Reports
101 Results Found
Filter