United States of America: Amendments to Cybersecurity Requirements for Financial Services Companies
Progress
Scope
Timeline of events
Implemented Second Amendments to Cybersecurity Requirements for Financial Services Companies
On 1 November 2023, the New York State Department of Financial Services (NYDFS) implemented the Second Amendments to the cybersecurity obligations for financial services companies (23 NYCRR 500). The Amendments apply to covered entities, including a…
SourceAdopted Second Amendments to Cybersecurity Requirements for Financial Services Companies
On 16 October 2023, the New York State Department of Financial Services (NYDFS) adopted the Second Amendments to the cybersecurity obligations for financial services companies (23 NYCRR 500). The Amendments apply to covered entities, including any p…
SourceClosed consultation on revised proposed Second Amendments to Cybersecurity Requirements for Financial Services Companies
On 14 August 2023, the New York State Department of Financial Services (NYDFS) closed the consultation on the revised proposed Second Amendments to the cybersecurity obligations of financial services companies (23 NYCRR 500). The Second Amendment in…
SourceOpened consultation on revised proposed Second Amendments to Cybersecurity Requirements for Financial Services Companies
On 28 June 2023, the New York State Department of Financial Services (NYDFS) published and opened a consultation on the revised proposed Second Amendments to the cybersecurity obligations of financial services companies (23 NYCRR 500) until 14 Augus…
SourceClosed consultation on Amendment to Cybersecurity Requirements for Financial Services Companies
On 9 January 2023, the public consultation on the Amendment to the cybersecurity obligations of financial services companies (23 NYCRR 500) closed. The Amendment includes an update to the definition of cybersecurity risk assessment, outlines the rol…
SourceOpened consultation on Amendment to Cybersecurity Requirements for Financial Services Companies
On 9 November 2022, the New York State Department of Financial Services (NYDFS) published and opened a second consultation on the Amendment to the cybersecurity obligations of financial services companies (23 NYCRR 500) until 9 January 2023. The Ame…
SourceConsultation closed on Amendments to Cybersecurity Requirements for Financial Services Companies
On 18 August 2022, the New York State Department of Financial Services (NYDFS) closed its consultation on 23 NYCRR 500 outlining amendments to the cybersecurity obligations of financial services companies. The changes include an updated definition o…
SourceConsultation opened on Amendments to Cybersecurity Requirements for Financial Services Companies
On 29 July 2022, the New York State Department of Financial Services (NYDFS) published and opened a consultation on 23 NYCRR 500, a set of amendments to the cybersecurity obligations of financial services companies. The changes include an updated de…
Source