The last remaining provisions of the amendments to the New York Department of Financial Services’ (DFS) cybersecurity regulation called Part 500 came into effect Nov. 1, 2025.
NYDFS Final Cybersecurity Rules – MFA, Asset Inventory, and Third-Party Risk