New York Department of Financial Services Questions Its Regulated Entities on Responses to and Lessons Learned from the SolarWinds Cyberattack

摘要

All in all, the SolarWinds Attack provided the DFS with a real-time opportunity to assess the cybersecuritypreparedness of its regulated entities, and identify areas of improvement for its regulated entities in managing risks from third-party service providers as well as areas of improvement for cybersecurity regulation. The SolarWinds Report provides some insight into the DFS's expectations of DFS-regulated entities, as well as plans for the future of the Cybersecurity Regulation and related guidance.