article thumbnail

NYDFS proposes significant cybersecurity regulation amendments

Data Protection Report

Covered entities must also periodically test their incident response plans (including “disruptive events such as ransomware,” which NYDFS specifically would require) and their ability to restore systems from backups. Cybersecurity Event Notification Would Expand. Notifications to DFS. 500.17). (500.17). Extortion Payments.

article thumbnail

Proposed Amendments to NY Financial Services Cybersecurity Regulations Impose New Obligations on Large Entities, Boards of Directors and CISOs

Hunton Privacy

of the Proposed Amendments, Class A Companies must (1) ensure use of strong, unique passwords; (2) monitor privileged access activity; and (3) unless, a reasonable equivalent is approved in writing by the company’s CISO, implement both a password vaulting solution for privileged accounts and an automated method for blocking commonly used passwords.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Don’t blame ‘The Things’

CGI

Whether it’s an industrial accident, transport disaster or how little Jonny had his tooth knocked out, the sequence of events is much the same; shock at what has occurred, hasty judgements as to the cause and then an extended period of investigation to identify lessons to avoid it happening again. This captures the irony of the situation!

IoT 40
article thumbnail

Managed IT Service Providers (MSPs): A Fast Way to Secure IT

eSecurity Planet

While MSPs also provide a wide range of business services, here we’ll focus on managed IT and cybersecurity service providers. For IT services and infrastructure, some larger MSPs will provide generalist services and attempt to solve all problems. Certainly not.

IT 89
article thumbnail

Managed IT Service Providers (MSPs): A Fast Way to Secure IT

eSecurity Planet

While MSPs also provide a wide range of business services, here we’ll focus on managed IT and cybersecurity service providers. For IT services and infrastructure, some larger MSPs will provide generalist services and attempt to solve all problems. Certainly not.

IT 76