NYDFS Cybersecurity Programme

Control: NYDFS-500-001
Regulation: NY DFS Part 500
Category: governance
Priority: critical
Frequency: annually
Type: governance

What this control requires

Implement NYDFS Part 500 cybersecurity programme based on risk assessment. Programme must cover: access controls, application security, audit trails, data encryption, incident response, network security, penetration testing, third-party service provider security, and training.

Other NY DFS Part 500 controls

NYDFS-500-002 - NYDFS Penetration Testing and Vulnerability ManagementNYDFS-500-003 - NYDFS Cybersecurity Event Reporting