• Mail
  • Linkedin
  • Twitter
Hire Us
Law and Forensics
  • Home
  • Products
  • Services
    • Cybersecurity Services
      • Assessments
      • Board Consulting
      • Data Governance
      • Due Diligence
      • Financial Institutions
      • Incident Response
      • Investigations
      • Privacy
      • Tabletops
    • eDiscovery Services
      • Consulting
      • Data Preservation
      • Expert Witness
      • Training Practice
    • Forensic Services
      • Cloud Computing
      • Consulting
      • Expert Testimony
      • Internet of Things
      • Investigations
      • Mobile Device
      • Dispute Resolution Services
      • Social Media
      • Server Forensics
  • Insights
  • About Us
  • Search
  • Menu
  • About the New York DFS Cybersecurity Regulation

    INSIGHTS

Legal Executive Institute

What Lawyers Are Asking About the New York DFS Cybersecurity Regulation

March 9, 2017

By Daniel B. Garrie

What Lawyers Are Asking About the New York DFS Cybersecurity Regulation

In September 2016, the New York Department of Financial Services (DFS) proposed a new Cybersecurity Regulation that would impose strict cybersecurity requirements on banks, consumer lenders, money transmitters, insurance companies and certain other financial service providers (each, a “Covered Entity”). DFS received varied, but primarily negative feedback on the proposed Regulation, as any commentators condemned the proposed Regulation as being too prescriptive and burdensome on Covered Entities. A common theme of the commentary was that the proposed Regulation did not allow Covered Entities to properly assess risk and build cybersecurity programs designed to meet those risks.

DFS subsequently revised the proposed Regulation and clearly took the comments to heart. The new proposed Regulation has greatly reduced the burden on Covered Entities and completely changed the regulatory compliance requirements. Demonstrating compliance with the Regulation is now based on walking a fine line between development of the Risk Assessment Policy and using the resulting Risk Assessment to modify or develop the Cybersecurity Program, the Cybersecurity Policy and associated procedures. In light of these revisions there are a number of questions that we have been asked by multiple companies.

To read the full article, go to the Legal Executive Institute

Insights

  • I Could Be Prosecuted for Paying Ransomware Ransom! How is that Possible?
  • Best Practices for Remote Advocacy During the Pandemic
  • Mastering Complex Cases: Effective Use of Special Masters in Complex Civil Cases
  • The COVID-19 Impact on Arbitration & How To Navigate Virtual Proceedings
  • Arbitration During A Global Pandemic: How to Properly Leverage Zoom and Similar Platforms to Conduct Arbitration Hearings
  • Employer Best Practices for Monitoring Remote Devices
  • Here’s Why Your Employer May Monitor Your Personal Files On Company Devices
  • Customizing Traditional Models of Mediation to Work in Today’s Covid-19 Environment
  • A Keystroke Causes a Tornado: Applying Chaos Theory to International Cyber Warfare Law

Newsletter

Contact Us

Contact Us
Sales Inquiry
​Press Inquiry
​Speaking Inquiry
Job Inquiry

CYBERSECURITY PRACTICE

Assessments
Board Consulting
Data Governance
Due Diligence
Financial Institutions
Incident Response

Investigations
Privacy
Tabletops

EDISCOVERY PRACTICE

Consulting

Data Preservation
Expert Witness

Training Practice

FORENSICS PRACTICE

Cloud Computing
Consulting
Expert Testimony
Internet of Things
Investigations
Mobile Device
Dispute Resolution Services
Social Media
Server Forensics  

ARTICLES

Browse All Articles

LECTURES

Browse All Lectures

RESOURCES

About Us
Events
Search

Law & Forensics © 2020. All Rights Reserved
  • Privacy Policy
  • Legal Notices
Scroll to top

This site uses cookies. By continuing to browse the site, you are agreeing to our use of cookies.

OKLearn more

Cookie and Privacy Settings

How we use cookies

We may request cookies to be set on your device. We use cookies to let us know when you visit our websites, how you interact with us, to enrich your user experience, and to customize your relationship with our website.

Click on the different category headings to find out more. You can also change some of your preferences. Note that blocking some types of cookies may impact your experience on our websites and the services we are able to offer.

Essential Website Cookies

These cookies are strictly necessary to provide you with services available through our website and to use some of its features.

Because these cookies are strictly necessary to deliver the website, you cannot refuse them without impacting how our site functions. You can block or delete them by changing your browser settings and force blocking all cookies on this website.

Google Analytics Cookies

These cookies collect information that is used either in aggregate form to help us understand how our website is being used or how effective our marketing campaigns are, or to help us customize our website and application for you in order to enhance your experience.

If you do not want that we track your visist to our site you can disable tracking in your browser here:

Other external services

We also use different external services like Google Webfonts, Google Maps and external Video providers. Since these providers may collect personal data like your IP address we allow you to block them here. Please be aware that this might heavily reduce the functionality and appearance of our site. Changes will take effect once you reload the page.

Google Webfont Settings:

Google Map Settings:

Vimeo and Youtube video embeds:

Privacy Policy

You can read about our cookies and privacy settings in detail on our Privacy Policy Page.

Privacy Policy