CYBERSECURITYTRACKER
Permanent story citation

NYS DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7157

As cited

Copy frozen at (site build).

breaches incidents

NYS DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities

On September 10, 2026, the New York State Department of Financial Services (DFS) released guidance establishing expectations for DFS-regulated financial services entities to conduct risk assessments that inform their cybersecurity programs. The guidance specifies requirements around scope, frequency, and assessment roles.

Why it matters: Financial services firms regulated by DFS must align their risk assessment practices with this new guidance or face potential enforcement action and compliance violations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary