{
  "attribution": {
    "product": "NovaCopilot",
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500/incident",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/nydfs-500/incident)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "fingerprint": "ewai:eu:fdb824",
    "proof": "sha256:94d2d2f8cb8945bf90817b390cf8749753e990ad55a3c50c0a8a3348f1e33e27",
    "jurisdiction": "eu"
  },
  "layer": "us-agent-section",
  "agent": "nydfs-500",
  "slug": "incident",
  "title": "Notice of a cybersecurity event",
  "reference": "23 NYCRR 500.17",
  "scope": "Notice to the supervisor within 72 hours, and an annual certification.",
  "rule": "nydfs-cybersecurity",
  "identifier": "23 NYCRR Part 500",
  "jurisdiction_scope": [
    "state:NY"
  ],
  "risk_dimensions": [
    "security",
    "operational",
    "financial"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": null,
  "register_source": null,
  "cited_by": [
    {
      "ruleId": "nydfs-incident",
      "code": "nydfs-incident-late",
      "title": "Anmälan av cyberhändelse är försenad",
      "titleEn": "Notice of the cybersecurity event is late",
      "verdict": "förbjudet",
      "audit": "KRAV_GÄLLER",
      "obligation": "23 NYCRR 500.17(a) kräver anmälan till tillsynsmyndigheten så snart som möjligt och senast 72 timmar efter att händelsen bedömts vara anmälningspliktig. 23 NYCRR 500.17(b) kräver en årlig intygan.",
      "obligationEn": "23 NYCRR 500.17(a) requires notice to the supervisor as promptly as possible and no later than 72 hours after determining that the event is notifiable. 23 NYCRR 500.17(b) requires an annual certification."
    },
    {
      "ruleId": "nydfs-exempt",
      "code": "nydfs-exempt",
      "title": "Ett begränsat undantag gäller, men kärnkraven kvarstår",
      "titleEn": "A limited exemption applies, the core requirements remain",
      "verdict": "risk",
      "audit": "KRAV_VILLKORAT",
      "obligation": "23 NYCRR 500.19 undantar vissa mindre verksamheter från delar av regeln. Undantaget omfattar inte programmet och policyn i 500.2 och 500.3, riskbedömningen i 500.9 eller anmälan i 500.17.",
      "obligationEn": "23 NYCRR 500.19 exempts certain smaller entities from parts of the regulation. The exemption does not cover the program and policy in 500.2 and 500.3, the risk assessment in 500.9 or the notice in 500.17."
    },
    {
      "ruleId": "nydfs-base",
      "code": "nydfs-base",
      "title": "Regeln gäller för verksamheten",
      "titleEn": "The regulation applies to the business",
      "verdict": "risk",
      "audit": "KRAV_GÄLLER",
      "obligation": "23 NYCRR Part 500 gäller varje verksamhet med tillstånd enligt New Yorks bank-, försäkrings- eller finanslagstiftning. Kraven omfattar program, ansvarig funktion, autentisering och anmälan.",
      "obligationEn": "23 NYCRR Part 500 applies to every entity licensed under New York banking, insurance or financial services law. The requirements cover the program, the responsible function, authentication and notice."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500/incident",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500",
  "hash": "sha256:94d2d2f8cb8945bf90817b390cf8749753e990ad55a3c50c0a8a3348f1e33e27",
  "citation": "23 NYCRR Part 500, NYDFS Part 500, Cybersäkerhet för finansiella bolag i New York. NovaCopilot, https://legal.exploreworldai.com/us/agent/nydfs-500 (hämtad 2026-08-15, bevis sha256:a3923bb591f93b2c, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-08-25",
  "expires": "2026-09-24T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:94d2d2f8cb8945bf90817b390cf8749753e990ad55a3c50c0a8a3348f1e33e27",
    "revalidate_after": "2026-09-23T01:43:54.475Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}