New York Regulators Take Aim at Third-Party Cybersecurity Expectations

Cybersecurity Requirements for Financial Services Companies, otherwise known as 23 NYCRR 500, is a comprehensive regulation established by the New York State Department of Financial Services. It requires covered entities to protect their customers’ information by following certain cybersecurity standards. 

Cybersecurity threats will always exist, but maintaining regulatory compliance can help your organization prevent and respond to events more effectively. The 22-page regulation describes requirements on how organizations should develop or improve their cybersecurity programs. 

Download the infographic to learn:

• Who must comply with 23 NYCRR 500
• 6 highlights of the cybersecurity regulation
• 4 tips to strengthen third-party compliance