{"publisher":"NovaCopilot","source":{"name":"New York State Senate Open Legislation","url":"https://www.dfs.ny.gov/system/files/documents/2023/12/rf23_nycrr_part_500_amend02_20231101.pdf"},"license":"https://legal.exploreworldai.com/revision","id":"us-new-york:nydfs-cyber-program","jurisdiction":"United States","state":"New York","level":"state","question":"What must an NYDFS cybersecurity program do?","answer":"A covered entity must maintain a cybersecurity program designed to protect its information systems and nonpublic information and perform the core functions listed in section 500.2.","reference":"23 NYCRR § 500.2","authority":"New York State Department of Financial Services","legalKind":"regulation","status":"In force at the reading date","readAt":"2026-09-22","relatedRules":[],"relatedCases":[],"canonical":"https://legal.exploreworldai.com/us/new-york/questions/nydfs-cyber-program","version":"us-new-york-v1.0.0","hash":"sha256:b9a5ee79a5f83d5dff8174f67d8892aff7dd237d3f65abb200af54a0c05e0de3"}