NYDFS Third-Party Service Provider Guidance
NYDFS guidance clarifying expectations for managing cybersecurity risk from third-party service providers.
Sectors
Articles (10)
Governance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management Review