NYDFS 23 NYCRR 500 · Compliance readiness
DFS wants an annual certification signed by a named person. That person is you.
The program behind the signature: the risk assessment, the controls, the reports, the filing.
How we workSame six steps, every project
- 1Issue
- 2Input
- 3Plan
- 4Solution
- 5Execution
- 6Happy client
Step 3 of 6: Plan
See the six steps for thisThe Department of Financial Services’ cybersecurity regulation, with an annual certification and named controls. It reaches past banks and insurers into the firms that hold their clients’ financial data.
Who it reaches
Any company licensed or regulated by the New York Department of Financial Services – banks, insurers, lenders, money transmitters – and, through their third-party obligations, the accounting and advisory firms that handle their data. Smaller covered entities get a limited exemption from some requirements, not from all of them. If a client of yours is a covered entity, their obligations tend to arrive in your inbox as a questionnaire.
The controls it names
Multi-factor authentication. Access privileges limited and reviewed. An asset inventory. Monitoring and logging. An incident response plan with a notification deadline. Penetration testing and vulnerability scanning on a schedule. Training. And an annual certification of compliance, signed by someone senior – which is why the evidence matters more here than almost anywhere. We implement and document the controls; the certification is yours to sign, on evidence you can stand behind.
What is included
- Gap assessment against Part 500
- MFA, privileged access and monitoring
- Incident response plan and notice timeline
- Annual certification support
Why clients stay
- 2004
- In business since
- 950+
- People we support
- 60 days
- Money-back guarantee
“After meeting Mariusz and discussing what our needs were with the budget we were looking to work with, a network system was designed and installed. When needed the Interactive AV-IT team has gone above and beyond the call of duty to resolve any issues.”
Ready to talk?
Book a fifteen-minute call, or tell us what you are dealing with and we will tell you what we would check first. No obligation.
Why businesses choose us
- One team for IT and AV – the network, the security, the phones and the boardroom.
- 24/7/365 monitoring, with a helpdesk that knows your office.
- A 60-day money-back guarantee for new managed clients.
- Based in Hauppauge, on site across Long Island and New York City since 2004 – and now in Boca Raton, FL.