Article
NYDFS Sets Important Expectations For Part 500 Risk Assessments
The New York State Department of Financial Services has issued new guidance identifying the most common deficiencies it encounters in cybersecurity risk assessments required under Part 500. Based on examinations and investigations, NYDFS outlines five recurring gaps and establishes clear expectations for how covered entities should design, conduct, and document risk assessments that inform their cybersecurity programs.
McDermott Will & Schulte