| 1 minute read

2025 New York Department of Financial Services (NYDFS) Reporting Reminder

New York State seal

The team at Avalon just wanted to remind you that the New York Department of Financial Services (NYDFS) cybersecurity regulation deadline is fast approaching. As part of NY DFS Cybersecurity Regulation 23 NYCRR 500, companies regulated by NYDFS are required to complete and file their annual cybersecurity compliance certification with the department.

Deadline: The filing deadline for the Notice of Compliance is April 15, 2025.

Key points to remember:

  • Ensure your cybersecurity program complies with the requirements outlined in 23 NYCRR 500.
  • If you are not fully compliant with each section, you are still required to submit a notice of material non-compliance with associated remediation timelines.
  • Complete and file the Notice of Compliance by the deadline.
  • Review your risk assessments, incident response plans, and cybersecurity policies to ensure they are up to date.

Please take action promptly to avoid penalties and ensure full compliance. If you need assistance or have questions regarding the filing process, contact the experts at Avalon today.

Blog Articles

New York Department of Financial Services (NYDFS) Amendments Effective November 2024

As covered in our previous article, the New York Department of Financial Services (NYDFS) updated its Cybersecurity Regulation in 2023. To help entities roll out the changes and new requirements, they have provided phased timelines for when these items must be implemented by.

Risks Lurking in the “Shadows”: Shadow IT and Shadow AI

You may have heard the saying: “Change is the only constant in life.” This is certainly true of the information technology industry, which in turn, has a ripple effect on the technology, services, risk, and regulatory requirements that impact your organization and its environment.

Focusing In On the New “Govern” Function in NIST CSF 2.0

In February 2024, the National Institute of Standards and Technology (NIST) released Version 2.0 of the Cybersecurity Framework (CSF or the Framework) which is the first significant update to the Framework since 2014 when it was first created.

Vector

About Us

Curabitur tincidunt eros sed magna dignissim semper. Sed bibendum tincidunt mauris, at auctor nisi. Mauris sed urna orci. Sed posuere justo odio, vel rhoncus neque sodales sed. Etiam ornare iaculis leo, et tincidunt neque vulputate at.