{
  "attribution": {
    "product": "NovaCopilot",
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500/mfa",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/nydfs-500/mfa)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "fingerprint": "ewai:eu:dd82e9",
    "proof": "sha256:20a59927364619536bd29851301582da5760bb5460b340224a91c2b3473dfe9c",
    "jurisdiction": "eu"
  },
  "layer": "us-agent-section",
  "agent": "nydfs-500",
  "slug": "mfa",
  "title": "Multi-factor authentication",
  "reference": "23 NYCRR 500.12",
  "scope": "Multi-factor authentication for remote and privileged access.",
  "rule": "nydfs-cybersecurity",
  "identifier": "23 NYCRR Part 500",
  "jurisdiction_scope": [
    "state:NY"
  ],
  "risk_dimensions": [
    "security",
    "operational",
    "financial"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": null,
  "register_source": null,
  "cited_by": [
    {
      "ruleId": "nydfs-mfa",
      "code": "nydfs-mfa",
      "title": "Flerfaktorsautentisering saknas",
      "titleEn": "Multi-factor authentication is absent",
      "verdict": "förbjudet",
      "audit": "KRAV_GÄLLER",
      "obligation": "23 NYCRR 500.12 kräver flerfaktorsautentisering för all fjärråtkomst till verksamhetens nät, för åtkomst till tredjepartstjänster med icke-offentlig information och för privilegierade konton.",
      "obligationEn": "23 NYCRR 500.12 requires multi-factor authentication for all remote access to the network, for access to third party applications holding nonpublic information and for privileged accounts."
    },
    {
      "ruleId": "nydfs-base",
      "code": "nydfs-base",
      "title": "Regeln gäller för verksamheten",
      "titleEn": "The regulation applies to the business",
      "verdict": "risk",
      "audit": "KRAV_GÄLLER",
      "obligation": "23 NYCRR Part 500 gäller varje verksamhet med tillstånd enligt New Yorks bank-, försäkrings- eller finanslagstiftning. Kraven omfattar program, ansvarig funktion, autentisering och anmälan.",
      "obligationEn": "23 NYCRR Part 500 applies to every entity licensed under New York banking, insurance or financial services law. The requirements cover the program, the responsible function, authentication and notice."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500/mfa",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500",
  "hash": "sha256:20a59927364619536bd29851301582da5760bb5460b340224a91c2b3473dfe9c",
  "citation": "23 NYCRR Part 500, NYDFS Part 500, Cybersäkerhet för finansiella bolag i New York. NovaCopilot, https://legal.exploreworldai.com/us/agent/nydfs-500 (hämtad 2026-08-15, bevis sha256:a3923bb591f93b2c, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-08-25",
  "expires": "2026-09-23T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:20a59927364619536bd29851301582da5760bb5460b340224a91c2b3473dfe9c",
    "revalidate_after": "2026-09-23T00:17:52.762Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}