Proposed Amendments to NY Financial Services Cybersecurity Regulations Impose New Obligations on Large Entities, Boards of Directors and CISOs
Hunton Privacy
AUGUST 15, 2022
As part of the “training and monitoring” requirements under Section 500.14 Covered entities also must conduct an “impact assessment whenever a change in the business or technology causes a material change in the covered entity’s cyber risk.” As part of the “risk assessment” requirements under Section 500.9
55 
Let's personalize your content