Financial Institutions Require More Oversight Of Cybsersecurity Risk Under NYDFS
The New York Department of Financial Services (NYDFS) has published a proposal to amend its cybersecurity rules, which will require regulated companies to notify the NYDFS of a third-party cybersecurity incident within 72 hours.
A draft version of the proposal released earlier this year required financial institutions to notify regulators about such incidents within 72 hours. This newer proposal, includes this notice requirement, along with an amendment that notice be provided to NYDFS within 24 hours of making a […]