NYDFS Guidance on Part 500 Cybersecurity Risk Assessments

A September 10 NYDFS industry letter tells covered financial institutions how to conduct and use the risk assessments mandated by 23 NYCRR Part 500, sharpening supervisory expectations.