Insurance Agencies and Title

What arrives

Part 500 certification: New York DFS 23 NYCRR 500.17(b). By April 15 each year, a certification of material compliance for the prior year, or a written acknowledgment of noncompliance.; Source
The 72-hour DFS notice: New York DFS 23 NYCRR 500.17(a). Notice to the superintendent no later than 72 hours after determining a cybersecurity incident has occurred.; Source
Pillar 3: ALTA Best Practices Framework 4.2, Best Practice 3. A written information security plan and a written privacy plan to protect nonpublic personal information.; Source
Part 500 MFA: New York DFS 23 NYCRR 500.12. Multi-factor authentication for any individual accessing any information system of a covered entity, subject to the limited exemption.; Source