The New York Department of Financial Services pioneered one of the first cybersecurity regulations in the U.S., requiring financial institutions to implement comprehensive cybersecurity programs. The regulation includes a broad range of requirements, including risk assessments, data encryption, and incident response plans. This comprehensive approach ensures that businesses take a holistic approach to cybersecurity and are adequately protecting their customers’ data. Now with amendments to the regulation proposed in late 2022, businesses are likely to soon face even stricter and more specific requirements in their procedural and technical cyber risk management, as well as increased responsibilities for senior executives. Attorneys who complete this course gain a thorough understanding of the NYDFS Cyber Regulations and the proposed amendments. In addition, this discussion will help equip attorneys in advising their clients on data privacy and cybersecurity matters, while becoming well-versed in these highly relevant regulations and regulatory trends.
In this seminar, our expert panelists begin by introducing cybersecurity and the key industries at risk. Our speakers then review the role of the NYDFS and its cyber regulations, 23NYCRR 500, reviewing the 6 regulatory minimum standards that it sets. Finally, our panelists discuss the proposed amendments to the cybersecurity regulation released in late 2022, which would introduce meaningful policy, technical, and leadership requirements for businesses.
Topics covered in this webinar:
- Introduction to Cybersecurity
- NYDFS Cybersecurity Regulation
- Proposed changes to the NYDFS Cyber Regulation
Featured Speakers:
Daniel B. Garrie, Esq., Founder, Law & Forensics; Neutral, JAMS; Faculty, Harvard
George Pierce, Special Counsel, Zeichner Ellman & Krause LLP
Justin Herring, Partner, Mayer Brown
K Royal, Global Privacy Officer, Crawford & Company