---
id: 3459
title: "Highlights of New York’s Cybersecurity Regulation 23 NYCRR Part 500"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/highlights-new-yorks-cybersecurity-regulation-23-nycrr-part-500"
published_at: "2018-09-04T16:00:00Z"
tags: ["compliance", "penetration-testing", "financial-services", "regulation", "cybersecurity", "nydfs"]
phying_url: "https://phying.com/item/3459"
lang: en
---

# Highlights of New York’s Cybersecurity Regulation 23 NYCRR Part 500

## Summary

New York's 23 NYCRR Part 500 cybersecurity regulation hit a major enforcement milestone in September 2018, mandating annual penetration testing, audit trails, and vulnerability assessments for firms.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2018-09-04T16:00:00Z
- **Original:** https://www.hackerone.com/blog/highlights-new-yorks-cybersecurity-regulation-23-nycrr-part-500
- **Phying News:** https://phying.com/item/3459