DFS Revises Proposed Cyber Reg Changes

​The New York State Department of Financial Services (DFS) today proposed revised changes to its cybersecurity regulation. Today's publication in New York State Register​, the state's weekly compilation of regulatory changes, modifies amendments DFS proposed last fall. The revisions proposed today respond to comments Big I New York and others submitted earlier this year on the first proposal.Most Big I New York members are agencies with eight or fewer employees. Much of the impact of the proposed amendments is on larger organizations such as carriers and banks. However, our preliminary review of today's proposal found some changes that affect all agencies and brokerages.Last fall's proposal would…

Continue ReadingDFS Revises Proposed Cyber Reg Changes

New Cybersecurity Reg Resource: How to ID ‘Nonpublic Information’

​One question we frequently get from members is whether a specific type of information is "nonpublic information" that the New York cybersecurity regulation requires them to protect. We've created an easy-to-use decision tree to help you figure that out. Simply answer the yes-no questions in order and you will be able to determine whether the regulation requires you to protect it or not.This file will be permanently posted in the Compliance Resources section of the Cybersecurity page on our website (www.biginy.org/cyber​). Click here to download it now​. Note: If you want to print it, you may have to adjust the print settings to shrink the file…

Continue ReadingNew Cybersecurity Reg Resource: How to ID ‘Nonpublic Information’