Skip to content

← All developments

New York Department of Financial Services · September 10, 2026 · Primary source

DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities

Score 43PRIMARYregulatoryState insurance deptNY

Summary

This is a DFS press release dated September 10, 2026, announcing the same cybersecurity risk-assessment guidance covered in Item 2, attributable to Acting Superintendent Kaitlin Asrow. The release restates the guidance's emphasis on ongoing risk assessments and compliance obligations under 23 NYCRR Part 500. As a press-release summary of guidance addressed at financial services entities broadly, it adds no substantive detail beyond the underlying guidance document.

What this may mean

The press release confirms issuance of DFS cybersecurity guidance but provides no additional substantive requirements beyond the industry letter. DFS-regulated entities, including health insurers operating in New York, are the nominal audience. Limited direct operational impact beyond awareness of the underlying guidance document.

Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.

Related items