NYDFS — 2nd Amendment (Part-1)

Understanding the NYDFS Second Amendment to 23 NYCRR 500

In this story, we will look at the original versus the second amendment requirements of NYCRR 500 to identify the key deltas.

500.2 Cybersecurity Program

500.3 Cybersecurity Policy

500.4 Chief Information Security Officer (Original)

500.4 Cyber Governance (Title Changed in the Second Amendment)

500.5 Penetration Testing and Vulnerability Assessments. (Original)

500.5 Vulnerability Management (Second Amendment)

500.5 Penetration Testing and Vulnerability v/s Vulnerability Management

500.6 Audit Trail

No Change — Same as the original requirement