The NYDFS 23 NYCRR 500 Third-Party Compliance Checklist

The New York State Department of Financial Services (NYDFS) established 23 NYCRR 500 to set cybersecurity requirements for banks, insurance companies, and other financial services firms. In addition to requiring firms to document their third-party risk management policies, the legislation includes specific provisions for assessing the cybersecurity practices of third-party service providers.

The NYDFS 23 NYCRR 500 Third-Party Compliance Checklist distills key mandates that will impact your third-party risk management program, including those added in the most recent amendment from November 2022. Download the checklist now to:

• Understand NYDFS 23 NYCRR 500 and which firms it applies to
• Identify which sections of the law call for assessing, documenting and reporting on third-party risk
• Reveal which third-party risk management capabilities enable compliance
• Discover how Prevalent can help you automate and accelerate compliance with the law

This 10-page guide is ideal for any IT security or risk management professional who needs to simplify their firm's 23 NYCRR 500 compliance initiatives.