NYDFS Sets Out What a Part 500 Risk Assessment Has to Contain
DFS’s September 10, 2026 industry letter on 23 NYCRR 500.9 — what examiners expect a cybersecurity risk assessment to contain, and why it matters before the April 15 certification.
Read
- Home
- Insights
Regulatory reads
Insights
What changed, what it actually requires, and by when. Written the way we would brief a client — not the way a press release reads.
Articles
National Emergency Declared to Secure the U.S. Bulk-Power System
Executive Order 14421 declares a national emergency over foreign-produced grid equipment, prohibits covered transactions initiated after August 26, 2026, and puts the Department of Energy on a 120-day rulemaking clock.
Read
FinCEN Permanently Ends BOI Reporting for U.S. Companies
On August 11, 2026, FinCEN issued a final rule that permanently removes the requirement for U.S. companies and U.S. persons to report beneficial ownership information under the Corporate Transparency Act.
Read
New Executive Order on AI Innovation and Security
Executive Order 14409 sets a policy of promoting AI innovation and security — modernizing and hardening federal and private information systems, protecting intellectual property, and cultivating AI-enabled defensive capabilities.
Read
Strengthening Critical Infrastructure: New Executive Order Signals Major Shifts in Energy Sector Cybersecurity
An Executive Order on cybersecurity signals a significant evolution in how the energy sector must approach critical infrastructure protection, including an AI pilot for threat detection and automated response.
Read
Crédito por Retención de Empleados (ERC)
El Employee Retention Credit es una iniciativa fiscal federal diseñada para apoyar a las empresas afectadas durante la pandemia de COVID-19.
Read
CARES Act SBA Loans
Relief measures for businesses with fewer than 500 employees, including independent contractors, corporations, and nonprofit organizations.
Read
Securing your Web Presence
Fundamental strategies to prevent or mitigate damage to your web presence — starting with keeping a static clone of the site for rapid recovery.
Read
Calvary City Christian Academy and Preschool Construction
Firm news marking the inaugural construction site for the new Calvary City Christian Academy and Preschool facilities in Orlando, Florida.
Read
Cyber Security Alert – Password Interception
An alert about a ransom scam in which attackers quote a victim’s real password — harvested from previously breached databases — to establish credibility.
Read
International Forum on Law and New Technologies
Firm news from Panama City: cyber security, cyber terrorism, and the growing volume of internationally stored electronic evidence.
Read
23 NYCRR 500 Cybersecurity Requirements for Financial Services Companies
The elements of the NYDFS cybersecurity regulation, written against the first filing window — written policies, CISO reporting, testing cadence, audit trails, and notification.
Read
IT Deployments for Small and Medium Sized Businesses
Small and medium businesses mechanizing their operations generally misunderstand how IT resources have evolved — and what that now costs.
Read
Puerto Rico Expedited Tax Exempt Application
Puerto Rico Treasury Announcement 18-08 established procedures for nonprofit organizations to apply for Puerto Rico tax-exempt status.
Read
Certified Public Accountants Cyber Forum
Firm news from San Juan: the CPA Society of Puerto Rico hosted “Cyber Forum: Cyber Risks… Meeting the Challenges, Monitoring Risks.”
Read
Next step
Want these when they land?
We publish when a rule actually moves — no newsletter cadence for its own sake, and no marketing. Subscribe by RSS, or tell us what you are watching and we will flag it.