← Back

Wire · regulatory

NYDFS Issues Guidance on the Million Dollar Question—How to Conduct Cybersecurity ...

Published

24 September 2026

Topic

regulatory

◆ Sectors

Fintech

◆ Geography

United States

◆ Source

Read at jdsupra.com →

◆ Verified

Fusion42 · 24 September 2026 · Fusion42 review

On September 10, 2026, the New York State Department of Financial Services (NYDFS) issued detailed guidance for regulated entities on conducting cybersecurity risk assessments under Part 500, emphasizing governance, repeatable methodologies, comprehensive scope, documentation, and integration with enterprise risk management.

This Wire brief sits within Fusion42's coverage of Fintech, and 2 sources have reported it between 12 Sep 2026 and 24 Sep 2026.

◆ ◆ The Wire takeaway

You must overhaul your cyber risk assessments with clearer governance and documented methods or risk failing NYDFS exams and losing market trust. Leadership now expects precise risk-driven cybersecurity investment decisions, not just checkbox compliance.

◆ Coverage

2 sources · first reported 12 Sep 2026 · latest 24 Sep 2026

◆ Related on Wire

◆ Topics

Fintechnydfscybersecurityrisk-assessmentpart-500financial-services