NYDFS Proposed Enhancements – Second Amendment to 23 NYCRR 500
On July 29, 2022, the New York Department of Financial Services (NYDFS) provided several potential enhancements to the existing Part 500 Cybersecurity Rules. The Draft Amendments can be divided into six categories: Assessments, Technical Requirements, Governance, Obligations for Larger Companies, Notifications, and Penalties. Assessments The Draft Amendments expand the current definition of Risk Assessment to
