New York State's Financial Services Cybersecurity Regulation

The Regulation was designed to promote the protection of customer information as well as the underlying information technology systems of regulated entities in light of the ever-increasing threat of cyber attacks.

18 minute read March 02, 2017 at 12:05 AM
By
Elizabeth B. Vandesteeg and Kathryn C. Nadro
New York State's Financial Services Cybersecurity Regulation

New York is poised to become the first state in the nation with comprehensive cybersecurity regulation and reporting requirements applicable to the entire financial services industry, with only very limited exemptions. 23 NYCRR 500 (the Regulation) will require banks, insurance companies, and other financial institutions regulated by the New York State Department of Financial Services (DFS) to establish and maintain a cybersecurity program designed to protect consumers and the stability of New York's financial services industry.

This premium content is locked for Cybersecurity Law & Strategy subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN Cybersecurity Law & Strategy

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

Agentic AI introduces risks that are novel and complex, but the most effective response is a familiar one. Zero Trust answers the problem of when an AI agent misfires on its own by constraining what an agent can do rather than betting on how it will behave.

July 31, 2026

The outsourcing of office and administrative services is expected to grow 50%-60% in the next five years. Contrary to what decision-makers think, and what the service providers hope you think, the biggest risk in outsourcing isn't choosing the wrong provider. It's outsourcing the wrong process, under the wrong model, with the wrong performance measures and contract terms.

July 31, 2026