Resource: NY DFS Issues New Cybersecurity Guidance to Address Risks Associated with the Use of Third-Party Service Providers

The New York State Department of Financial Services issued guidance clarifying cybersecurity responsibilities for regulated entities that use third-party service providers, emphasizing that entities remain accountable for protecting consumers and nonpublic information. The guidance aims to explain existing DFS cybersecurity regulation and share best practices; it does not impose new requirements and directs readers to the Department's website and Cybersecurity Resource Center for the full guidance.