Source: https://www.corsolegal.com/category/allarticles/new-york-law/ny-dfs-500/page/2/
Timestamp: 2019-09-18 23:46:18
Document Index: 566735270

Matched Legal Cases: ['art 500', 'art 500', 'art 500', 'art 500', 'art 500', 'art 500']

NY DFS Part 500 Archives - Page 2 of 4 - Corso Legal Group
Category: NY DFS Part 500
Navigating NY DFS Part 500.12: Multi-Factor Authentication
This section requires that a covered entity, based on its risk assessment, utilize “effective controls, which may include Multi-Factor Authentication or Risk-Based Authentication” to protect nonpublic information and information systems from unauthorized access…
Navigating NY DFS Part 500.09: Risk Assessment
This section requires that a covered entity conduct a periodic risk assessment of the covered entity’s information systems. The risk assessment must…
This section requires a covered entity to implement monitoring and testing, based on the covered entity’s risk assessment, to assess the effectiveness of the covered entity’s cybersecurity program. The monitoring and testing should either continuously monitor or detect, on an ongoing basis, changes in information systems that may create or indicate vulnerabilities. If the covered entity does not implement monitoring and testing as described above, they must conduct…
Navigating NY DFS Part 500.17: Notice to Superintendent
This section requires the covered entity to file a report annually (by February 15) that covers the prior calendar year. This report must utilize the form provided in Appendix A of 23 NYCRR 500 and certify the covered entity is in compliance with 23 NYCRR 500…
Navigating NY DFS Part 500.16: Incident Response Plan
An incident response plan, generally, refers to how the organization responds to potential cybersecurity incidents. Incident response plans generally include multiple phases, usually beginning with the detection of a cybersecurity incident and usually ending with a review of how to improve, if necessary, the organization’s response to the incident…
Cybersecurity In the Legal Space: Is Your Organization Prepared? September 1, 2019
GDPR & CCPA Are Just the Beginning September 1, 2019
How Middle Market Companies Can Shore Up Their Data Privacy The most significant overhaul to the EU's data privacy policies in over 20 years, with extraterritorial reach, forced American businesses to remediate, and in some cases, overhaul their data privacy governance programs. But the GPDR was just the beginning. Organizations seeking compliance with the growing […]
The State of the U.S. Privacy Job Market, 2019: Part Two September 1, 2019
A Reflection on the Year Behind, the Years Ahead, and Why Privacy Means So Much to Us Part Two of a Two-Part Article Part two of The State of the U.S. Privacy Job Market, 2019 will outline what is happening within service providers, consultancies, and vendors will touch briefly on government agencies and will predict […]
Legal Tech: Summer 2019 E-Discovery Case Law Review September 1, 2019
Legal Tech: Litigation Support, E-discovery and the Recovery of Costs September 1, 2019