New York to Impose New Cybersecurity Regulations
The controversial new regulations are the first in the nation, and may not be the last…
An article review.
On March 1 New York State became the first in the nation to impose its own cybersecurity regulations on banking institutions.
Though banking institutions have 180 days to come into compliance, there are complaints that the regulations place a burden on the institutions and that there hasn’t been enough time to consider them. These complaints were echoed by the American Banker’s Association, which adds that these new regulations may come into conflict with Federal cybersecurity regulations.
The regulations themselves include the requirement that banks have a CISO or Chief Information Security Officer, and that they report cybersecurity related incidents within 72 hours. Additionally, annual penetration tests, risk assessments and encryption of data in transit and at rest are included in the regulations. Institutions will have to submit a letter certifying compliance to New York State every year.
As the financial capital of the world, many are watching to see what impact these regulations may have–and if they are effective we may see other states following New York’s lead, meaning these regulations are worth a second look no matter where you do business.
Original article by Jeremy Kirk writing for Data Breach Today.
While we’re not a news service, we often use current events to comment on trends and
Welcome IBA Forum attendees! Looking to set up your own program for people to work fr
A short. This presentation is intended for those who are planning to participate in a
An Update to the FFIEC Outsourced Cloud Computing Document In April 2020, the FFIEC r
Another awareness poster for YOUR customers (and users). Now that we have our own em