New York Department of Financial Services · September 10, 2026 · Primary source
Guidance on How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation
Summary
The New York State Department of Financial Services issued an industry letter dated September 10, 2026, clarifying regulatory requirements for risk assessments under the DFS Cybersecurity Regulation (23 NYCRR Part 500). The guidance is directed at all DFS-regulated entities and explains how Covered Entities must structure and use risk assessments to support their cybersecurity programs.
What this may mean
DFS-regulated financial services entities, including insurers and certain health plans subject to DFS jurisdiction, face clarified expectations for the conduct and documentation of cybersecurity risk assessments under 23 NYCRR Part 500. The guidance does not create new legal obligations but signals DFS examination and enforcement priorities around risk assessment methodology.
Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.
Related items
- New York Department of Financial Services · September 5, 2026Department of Financial Services Announces 2027 Health Insurance Premium Rates, Saving New Yorkers $1.6 BillionScore 56
- New York Department of Financial Services · July 14, 2026Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat EnvironmentScore 56
- New York Department of Financial Services · August 12, 2026Cybersecurity Alert: N-central Vulnerability Affecting Some Managed Service ProvidersScore 55
- New York Department of Financial Services · August 17, 2026Cybersecurity Alert: N-central Vulnerability Affecting Some Managed Service ProvidersScore 46
- New York Department of Financial Services · September 10, 2026DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services EntitiesScore 43
- New York Department of Financial Services · August 14, 2026New York State Department of Financial Services Introduces Guidance and Proposed Regulation to Strengthen New York’s Surprise Medical Bill Resolution ProcessScore 31