{
  "attribution": {
    "product": "NovaCopilot",
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/nydfs-500)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "fingerprint": "ewai:eu:d1efcf",
    "proof": "sha256:faefd2033798acc7da35e9aaac5e5f63a7e5526d67dc0b6afcf153b8257d62c2",
    "jurisdiction": "eu"
  },
  "cagi_brand": "CAGI – Corporate Artificial General Intelligence",
  "cagi_version": "1.0",
  "cagi_relation": "alternate-entry",
  "canonical_agent": "/us/agent/nydfs-500",
  "jurisdiction": "US NY",
  "agent_type": "deterministic",
  "cagi_entry": "https://legal.exploreworldai.com/us/ny/cagi-api/nydfs-500",
  "canonical_agent_url": "https://legal.exploreworldai.com/us/agent/nydfs-500",
  "id": "nydfs-500",
  "rule": "nydfs-cybersecurity",
  "identifier": "23 NYCRR Part 500",
  "jurisdiction_scope": [
    "state:NY"
  ],
  "risk_dimensions": [
    "security",
    "operational",
    "financial"
  ],
  "tier": 1,
  "coverage_score": 100,
  "change_impact_score": 5,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "engine": {
    "version": "agent-engine-1",
    "hash": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0"
  },
  "spi": {
    "call": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/run",
    "method": "GET",
    "inputs": [
      {
        "name": "omfattad_enhet",
        "kind": "boolean",
        "label": "Verksamheten har tillstånd enligt New Yorks finanslagstiftning",
        "labelEn": "The business is licensed under New York financial services law"
      },
      {
        "name": "undantag_begransat",
        "kind": "boolean",
        "label": "Ett begränsat undantag enligt 500.19 är fastställt",
        "labelEn": "A limited exemption under 500.19 has been determined"
      },
      {
        "name": "program_dokumenterat",
        "kind": "boolean",
        "label": "Cybersäkerhetsprogram och policy är dokumenterade och godkända",
        "labelEn": "The cybersecurity program and policy are documented and approved"
      },
      {
        "name": "ciso_utsedd",
        "kind": "boolean",
        "label": "En ansvarig för informationssäkerhet är utsedd",
        "labelEn": "A chief information security officer is appointed"
      },
      {
        "name": "mfa_infort",
        "kind": "boolean",
        "label": "Flerfaktorsautentisering är införd för fjärråtkomst och privilegierad åtkomst",
        "labelEn": "Multi-factor authentication is in place for remote and privileged access"
      },
      {
        "name": "riskbedomning_aktuell",
        "kind": "boolean",
        "label": "Riskbedömningen är aktuell och dokumenterad",
        "labelEn": "The risk assessment is current and documented"
      },
      {
        "name": "tredjepartspolicy",
        "kind": "boolean",
        "label": "Policy för tredjepartsleverantörer finns",
        "labelEn": "A third party service provider policy is in place"
      },
      {
        "name": "incident_intraffat",
        "kind": "boolean",
        "label": "En cyberhändelse har inträffat",
        "labelEn": "A cybersecurity event has occurred"
      },
      {
        "name": "anmalan_inom_72h",
        "kind": "boolean",
        "label": "Anmälan till tillsynsmyndigheten är gjord inom 72 timmar",
        "labelEn": "Notice to the supervisor was given within 72 hours"
      }
    ],
    "output": [
      "verdict",
      "audit",
      "outcome",
      "trace",
      "missing",
      "facts",
      "hash"
    ],
    "errors": [
      {
        "code": 400,
        "meaning": "Okänt fält eller värde utanför de tillåtna"
      },
      {
        "code": 404,
        "meaning": "Agenten finns inte"
      },
      {
        "code": 429,
        "meaning": "Kvoten är förbrukad"
      }
    ],
    "quota": "60 anrop per minut och klient",
    "license": "https://legal.exploreworldai.com/citering",
    "stability": "Fält och utfallskoder ändras inte utan nytt bygge och ny hash"
  },
  "sources": [
    {
      "identifier": "23 NYCRR Part 500",
      "title": "Cybersecurity program and policy",
      "reference": "23 NYCRR 500.2 and 500.3",
      "scope": "A documented programme and a policy approved by the board or a senior officer.",
      "officialUrl": null
    },
    {
      "identifier": "23 NYCRR Part 500",
      "title": "Chief Information Security Officer",
      "reference": "23 NYCRR 500.4",
      "scope": "A named officer and an annual written report to the governing body.",
      "officialUrl": null
    },
    {
      "identifier": "23 NYCRR Part 500",
      "title": "Multi-factor authentication",
      "reference": "23 NYCRR 500.12",
      "scope": "Multi-factor authentication for remote and privileged access.",
      "officialUrl": null
    },
    {
      "identifier": "23 NYCRR Part 500",
      "title": "Notice of a cybersecurity event",
      "reference": "23 NYCRR 500.17",
      "scope": "Notice to the supervisor within 72 hours, and an annual certification.",
      "officialUrl": null
    }
  ],
  "supervisors": [
    {
      "id": "nydfs",
      "name": "New York State Department of Financial Services",
      "shortName": "NYDFS",
      "url": "https://www.dfs.ny.gov/"
    }
  ],
  "monitor": {
    "feed": "https://legal.exploreworldai.com/api/public/v1/changes/feed?layer=us",
    "diff": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/monitor.json",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/freshness?layer=us",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify"
  },
  "artifacts": {
    "manifest": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/manifest.json",
    "script": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/script.json",
    "ai": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/ai.json",
    "run": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/run",
    "monitor": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/monitor.json",
    "sections": "https://legal.exploreworldai.com/api/public/v1/us-agents/nydfs-500/sections",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify"
  },
  "hashes": {
    "metadata": "sha256:e661b8575291821cb8d0d6544905492a044c5af572d90071bf5326c9c94e4455",
    "text": "sha256:5d51187fc7712edbcd42e631d799c6eabf21621e0b8e2348890c1ed3f3ce95de",
    "script": "sha256:34e076130ec194f1ce71e0ec14d88a6ed7e096cecfed73c2bd151a8ad78bb205",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:e6ce103c3d94d5258773894261a910f200a806437deda10668cdc2b2c113c065"
  },
  "version": "legal-2026-08-25",
  "official_source": null,
  "canonical": "https://legal.exploreworldai.com/us/agent/nydfs-500",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "citation": "23 NYCRR Part 500, NYDFS Part 500, Cybersäkerhet för finansiella bolag i New York. NovaCopilot, https://legal.exploreworldai.com/us/agent/nydfs-500 (hämtad 2026-08-15, bevis sha256:a3923bb591f93b2c, bygge legal-2026-08-25).",
  "hash": "sha256:faefd2033798acc7da35e9aaac5e5f63a7e5526d67dc0b6afcf153b8257d62c2",
  "expires": "2026-09-24T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:faefd2033798acc7da35e9aaac5e5f63a7e5526d67dc0b6afcf153b8257d62c2",
    "revalidate_after": "2026-09-23T01:00:49.704Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}