{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/regler/nydfs-cybersecurity",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:a3f5ec22fe9255affd09ebf2d651d3b68c4796ca26c1fe700e0e0aa9b9001848",
    "jurisdiction": "us",
    "lang": "sv"
  },
  "item": {
    "id": "nydfs-500",
    "slug": "nydfs-cybersecurity",
    "layer": "us",
    "name": "NYDFS Cybersecurity Regulation",
    "shortName": "NYDFS Part 500",
    "level": "state",
    "state": "NY",
    "identifier": "23 NYCRR Part 500",
    "legislationIdentifier": "23 NYCRR Part 500",
    "adopted": "2017-03-01",
    "applies": "2023-11-01",
    "status": "phased",
    "sourceUrl": "https://www.dfs.ny.gov/",
    "url": "https://legal.exploreworldai.com/us/regler/nydfs-cybersecurity",
    "api": "https://legal.exploreworldai.com/api/public/v1/us-rules/nydfs-cybersecurity",
    "readAt": "2026-08-15",
    "source_confidence": "derived",
    "officialUrl": "https://www.dfs.ny.gov/",
    "officialPublisher": "dfs.ny.gov",
    "mirrorUrl": null,
    "provenance": {
      "source_confidence": "derived",
      "identifier": "23 NYCRR Part 500",
      "layer": "us",
      "official_url": "https://www.dfs.ny.gov/",
      "official_publisher": "dfs.ny.gov",
      "mirror_url": null,
      "mirror_publisher": null,
      "canonical": "https://legal.exploreworldai.com/us/regler/nydfs-cybersecurity",
      "api": "https://legal.exploreworldai.com/api/public/v1/us-rules/nydfs-cybersecurity",
      "read_at": "2026-08-15",
      "version": "legal-2026-08-25",
      "hash": "sha256:8b861579db165d25e1a1ad8cd5bbd30696ed23e5ee633885737fb735d945341e",
      "citation": "23 NYCRR Part 500, NYDFS Cybersecurity Regulation. ExploreWorld Legal, https://legal.exploreworldai.com/us/regler/nydfs-cybersecurity (hämtad 2026-08-15, bevis sha256:8b861579db165d25, bygge legal-2026-08-25).",
      "credit": "ExploreWorld Legal, legal.exploreworldai.com",
      "usage": "Fri återgivning med angiven källa och läsdatum. Kontrollera alltid raden mot den officiella publiceringen innan den används i ett ärende.",
      "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
      "contract": "https://legal.exploreworldai.com/citering"
    },
    "statusNote": "Gäller sedan 2017. Den andra ändringen trädde i kraft den 1 november 2023, med övergångsdatum fram till november 2025.",
    "sourceUrls": [
      "https://www.dfs.ny.gov/"
    ],
    "blocks": [
      {
        "id": "program",
        "title": "Cybersecurity program and policy",
        "reference": "23 NYCRR 500.2 and 500.3",
        "scope": "A documented programme and a policy approved by the board or a senior officer."
      },
      {
        "id": "ciso",
        "title": "Chief Information Security Officer",
        "reference": "23 NYCRR 500.4",
        "scope": "A named officer and an annual written report to the governing body."
      },
      {
        "id": "mfa",
        "title": "Multi-factor authentication",
        "reference": "23 NYCRR 500.12",
        "scope": "Multi-factor authentication for remote and privileged access."
      },
      {
        "id": "incident",
        "title": "Notice of a cybersecurity event",
        "reference": "23 NYCRR 500.17",
        "scope": "Notice to the supervisor within 72 hours, and an annual certification."
      }
    ],
    "euCrosswalk": [
      {
        "actSlug": "nis2-2022-2555",
        "note": "Båda texterna pekar ut en ansvarig funktion, kräver rapport till ledningsorganet och sätter en tidig anmälan av allvarliga incidenter. EU-texten gäller väsentliga verksamheter, delstatsregeln finansiella bolag med tillstånd.",
        "url": "https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555"
      }
    ]
  },
  "meta": {
    "build": "legal-2026-08-25",
    "builtAt": "2026-08-25",
    "engine": "legal-answer/1.1.0",
    "api": "v1",
    "license": "Källhänvisningar och identifierare. Ingen lagtext återges.",
    "disclaimer": "Deterministisk källuppslagning, inte juridisk rådgivning och inget efterlevnadsbeslut."
  },
  "hash": "sha256:a3f5ec22fe9255affd09ebf2d651d3b68c4796ca26c1fe700e0e0aa9b9001848",
  "version": "legal-2026-08-25",
  "expires": "2026-09-01T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:a3f5ec22fe9255affd09ebf2d651d3b68c4796ca26c1fe700e0e0aa9b9001848",
    "revalidate_after": "2026-08-30T06:55:56.608Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/us/regler/nydfs-cybersecurity",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "usageInfo": "https://legal.exploreworldai.com/citering"
}