NYDFS Sets Out What a Part 500 Risk Assessment Has to Contain
DFS’s September 10, 2026 industry letter on 23 NYCRR 500.9 — what examiners expect a cybersecurity risk assessment to contain, and why it matters before the April 15 certification.


DFS’s September 10, 2026 industry letter on 23 NYCRR 500.9 — what examiners expect a cybersecurity risk assessment to contain, and why it matters before the April 15 certification.

Executive Order 14421 declares a national emergency over foreign-produced grid equipment, prohibits covered transactions initiated after August 26, 2026, and puts the Department of Energy on a 120-day rulemaking clock.

On August 11, 2026, FinCEN issued a final rule that permanently removes the requirement for U.S. companies and U.S. persons to report beneficial ownership information under the Corporate Transparency Act.

El Employee Retention Credit es una iniciativa fiscal federal diseñada para apoyar a las empresas afectadas durante la pandemia de COVID-19.

Relief measures for businesses with fewer than 500 employees, including independent contractors, corporations, and nonprofit organizations.
Next step
A 30-minute conversation, no charge, no obligation. We will tell you whether an assessment is the right next step, whether we are the right firm — and if we are not, who is more likely to be.