NEW YORK STATE DEPARTMENT OF FINANCIAL SERVICES PROPOSED 23 NYCRR 500  
CYBERSECURITY REQUIREMENTS FOR FINANCIAL SERVICES COMPANIES
 
 I, Maria T. Vullo, Superintendent of Financial Services, pursuant to the authority granted by sections 102, 201, 202, 301, 302 and 408 of the Financial Services Law, do hereby promulgate Part 500 of Title 23 of the Official Compilation of Codes, Rules and Regulations of the State of New York, to take effect upon publication in the State Register, to read as follows:  
(ALL MATTER IS NEW)  
Section 500.00 Introduction.  
 The New York State Department of Financial Services (“DFS”) has been closely monitoring the evergrowing threat posed to information and financial systems by nation-states, terrorist organizations and independent criminal actors.  Recently, cybercriminals have sought to exploit technological vulnerabilities to gain access to sensitive electronic data.  Cybercriminals can cause significant financial losses for DFS regulated entities as well as for New York consumers whose private information may be revealed and/or stolen for illicit purposes.  The financial services industry is a significant target of cybersecurity threats.  DFS appreciates that many firms have proactively increased their cybersecurity programs with great success.  

Click here to read more