Insurance Brokers

What arrives

Part 500 certification
New York DFS 23 NYCRR 500.17(b). By April 15 each year, a certification of material compliance for the prior year, or a written acknowledgment of noncompliance.
Source
The 72-hour DFS notice
New York DFS 23 NYCRR 500.17(a). Notice to the superintendent no later than 72 hours after determining a cybersecurity incident has occurred.
Source
Part 500 MFA
New York DFS 23 NYCRR 500.12. Multi-factor authentication for any individual accessing any information system of a covered entity, subject to the limited exemption.
Source
The NAIC 72-hour notice
NAIC Insurance Data Security Model Law (#668), Section 6A, where a state has adopted it. Notice to the commissioner within 72 hours of determining a cybersecurity event.
Source
A person at a meeting table turning printed pages, seen from behind the shoulder.

Request an Introduction