New York’s Cybersecurity Regulation (23 NYCRR 500) requires all insurance entities that hold a New York state insurance license—referred to as covered entities in the regulation—to file a certification of compliance with the New York Department of Financial Services...
