On 16 October 2023, the New York State Department of Financial Services (NYDFS) adopted the Second Amendments to the cybersecurity obligations for financial services companies (23 NYCRR 500). The Amendments apply to covered entities, including any p…