The “Final Final” is Here: NYDFS Cybersecurity Regulations

On February 16, NYDFS issued its Final Rules, following the initial proposed rules published in September 2016 and two rounds of feedback via industry complaints and public comment. The Final Rules set forth requirements for a risk-based approach to cybersecurity, and include expectations for reporting on cybersecurity risks and events to senior management and NYDFS.

Click here to learn more about how to prepare for the new requirements, timing and implementation details, changes to the rules since the December announcement, and other related cybersecurity developments.

Authored by Harriet Pearson and Paul Otto