How to Tackle Cybersecurity Challenges in Flexible Work Settings
As flexible work environments become the new norm, safeguarding company data against advanced cyber threats is critical. You can learn how to...
1 min read
Michael Markulec
:
Apr 23, 2021 10:04:01 AM
A New York-based securities brokerage and insurance firm will pay a $3 million penalty to the New York Department of Financial Services (NYDFS) for exposing its customers' private data in four cyber breaches, two of which it never reported to the department.
The NYDFS said in a statement this week that its investigation of National Securities Corp (NSC) uncovered evidence of the four cybersecurity incidents between 2018 and 2020. The breaches involved unauthorized access to its employee's email accounts, who have access to a significant amount of sensitive personal data. According to the NYDFS statement, NCS violated the department's cybersecurity regulation by failing to implement multi-factor authentication and not implementing equivalent or more secure access controls approved by the company's chief information security officer.
The NYDFS Cybersecurity Regulation (23 NYCRR 500) is a set of regulations from the NYDFS that places cybersecurity requirements on all covered financial institutions. The rules were released on February 16th, 2017, after two rounds of feedback from the industry and the public. These regulations acknowledge the ever-growing threat posed to financial systems by cybercriminals and are designed to ensure businesses effectively protect their customer's confidential information from cyber-attacks. The regulation requires conducting regular security risk assessments, keeping audit trails of asset use, providing defensive infrastructures, maintaining policies and procedures for cybersecurity, and creating an incident response plan.
Here are few essential points to keep in mind about the NYDFS regulations:
As flexible work environments become the new norm, safeguarding company data against advanced cyber threats is critical. You can learn how to...
In an increasingly digital world, safeguarding manufacturing environments from cyber threats is more critical than ever.
Discover how Microsoft Sentinel can be a game-changer for your small business's cybersecurity strategy.