Insurance Carriers

What arrives

Part 500 certification
New York DFS 23 NYCRR 500.17(b). By April 15 each year, a certification of material compliance for the prior year, or a written acknowledgment of noncompliance.
Source
The 72-hour DFS notice
New York DFS 23 NYCRR 500.17(a). Notice to the superintendent no later than 72 hours after determining a cybersecurity incident has occurred.
Source
Part 500 MFA
New York DFS 23 NYCRR 500.12. Multi-factor authentication for any individual accessing any information system of a covered entity, subject to the limited exemption.
Source
The CISO report
New York DFS 23 NYCRR 500.4(b). The CISO reports in writing at least annually to the senior governing body on the cybersecurity program.
Source
Form 8-K Item 1.05
SEC Form 8-K Item 1.05, for registrants. A material cybersecurity incident disclosed within four business days of determining it was material.
Source
A model house and a house key beside rolled banknotes and printed policy papers.

Request an Introduction