|
Briefing
|
- New York Financial Cybersecurity Regulations – New York Department of Financial Services announced final cybersecurity regulations for financial institutions to take effect on March 1, 2017, designed to protect customers’ personal and financial information from cyber threats
- Cybersecurity Program Setup – Adopt cybersecurity program that identifies, detects, responds, recovers, and reports cybersecurity risks
- Written Cybersecurity Policy – Implement and maintain written cybersecurity policy addressing information security, customer data privacy, vendor and third-party service provider management, incident response, among others
- Information Security Leadership – Appoint Chief Information Security Officer to oversee, implement, and enforce cybersecurity program
- Third Party Vendor Management – Requires increased security in working with third-party vendors, including conducting risk assessments, promoting use of encryption, and enforcing compliance
|
