Understanding NYDFS Cybersecurity Regulations

In the last few years, cybersecurity strategies and risk management practices have been put to the test. The increased reliance on remote work, digital communications, and cloud-based storage accelerated by the pandemic has greatly expanded the opportunities and incentives for phishing campaigns or ransomware demands, among other challenges. The fallout of cyber incidents has time and time again demonstrated that they represent a major risk for organizations’ legal, financial, and reputational well-being. In response, the New York Department of Financial Services has one of the leading state bodies to introduce comprehensive cybersecurity regulations, specifically aimed at protecting the sensitive information held by financial institutions and related entities.