NYDFS Sets Out What a Part 500 Risk Assessment Has to Contain
DFS’s September 10, 2026 industry letter on 23 NYCRR 500.9 — what examiners expect a cybersecurity risk assessment to contain, and why it matters before the April 15 certification.
Read
Articles
National Emergency Declared to Secure the U.S. Bulk-Power System
Executive Order 14421 declares a national emergency over foreign-produced grid equipment, prohibits covered transactions initiated after August 26, 2026, and puts the Department of Energy on a 120-day rulemaking clock.
Read
New Executive Order on AI Innovation and Security
Executive Order 14409 sets a policy of promoting AI innovation and security — modernizing and hardening federal and private information systems, protecting intellectual property, and cultivating AI-enabled defensive capabilities.
Read
Strengthening Critical Infrastructure: New Executive Order Signals Major Shifts in Energy Sector Cybersecurity
An Executive Order on cybersecurity signals a significant evolution in how the energy sector must approach critical infrastructure protection, including an AI pilot for threat detection and automated response.
Read
Securing your Web Presence
Fundamental strategies to prevent or mitigate damage to your web presence — starting with keeping a static clone of the site for rapid recovery.
Read
Cyber Security Alert – Password Interception
An alert about a ransom scam in which attackers quote a victim’s real password — harvested from previously breached databases — to establish credibility.
Read
International Forum on Law and New Technologies
Firm news from Panama City: cyber security, cyber terrorism, and the growing volume of internationally stored electronic evidence.
Read
23 NYCRR 500 Cybersecurity Requirements for Financial Services Companies
The elements of the NYDFS cybersecurity regulation, written against the first filing window — written policies, CISO reporting, testing cadence, audit trails, and notification.
Read
IT Deployments for Small and Medium Sized Businesses
Small and medium businesses mechanizing their operations generally misunderstand how IT resources have evolved — and what that now costs.
Read
Certified Public Accountants Cyber Forum
Firm news from San Juan: the CPA Society of Puerto Rico hosted “Cyber Forum: Cyber Risks… Meeting the Challenges, Monitoring Risks.”
Read
Next step
Tell us what you’re facing.
A 30-minute conversation, no charge, no obligation. We will tell you whether an assessment is the right next step, whether we are the right firm — and if we are not, who is more likely to be.