NYDFS Cybersecurity Event Reporting

Control: NYDFS-500-003
Regulation: NY DFS Part 500
Category: operational
Priority: critical
Frequency: annually
Type: operational

What this control requires

Report cybersecurity events to NYDFS within 72 hours of determining a reportable event occurred. Maintain cybersecurity event log. Implement determination procedures distinguishing reportable from non-reportable events. File annual cybersecurity certification.

Other NY DFS Part 500 controls

NYDFS-500-001 - NYDFS Cybersecurity ProgrammeNYDFS-500-002 - NYDFS Penetration Testing and Vulnerability Management