Speaker, RIMS Cyberisk Forum, "Legislating Risk Management: The NY Department of Financial Services Cybersecurity Requirements," Las Vegas, NV

The New York Department of Financial Services’ updated “Cybersecurity Requirements for Financial Services Companies” became effective on March 1, 2017, and is an important step in the ongoing national dialogue about reasonable and necessary cybersecurity standards for all businesses (not just regulated entities). The regulations include components of various existing federal and state law requirements, as well as controls that are recognized as “best practices” for data security. While the regulations apply to financial services companies, the breadth and scope of the regulations serve as a valuable guideline for mitigating data security risks—whether you work for a covered entity or not.