What happens when your cloud provider goes down? If you were caught in the recent AWS outage, you already know the answer: websites crash, backend systems freeze, and clients are left wondering what’s going on. For insurance agencies, these disruptions aren’t just...
Beginning Thursday, May 1, 2025, the next wave of cyber security compliance requirements under the amended New York State Department of Financial Services’ regulation (23 NYCRR 500) will go into effect. These rules will apply differently depending on your exemption...
PIA Northeast published a seven-part series earlier this year that dove into the intricacies of the amended cyber security legislation in New York state. One article discussed the expansion of the entities that fall under the limited exemption for covered entities. As...
As of Oct. 16, 2024, the New York State Department of Financial Services issued new guidance for the entities it regulates—specifically addressing cyber security risks arising from artificial intelligence. This guidance is especially relevant for insurance agents and...
This article in the cyber series is for those individuals who may lack a significant physical or financial presence in New York state. Just because a person lacks a physical or financial presence in the state though, does not mean that the New York cyber security...
Prior articles in the cyber series have concentrated on what it means to be a covered entity. This article discusses what covered entities must do to comply with New York’s cyber security regulation (23 NYCRR 500). Understanding covered entities Covered entities are...
Prior articles in the cyber series have concentrated on what it means to be a covered entity. This article transitions into discussing what covered entities that qualify for a limited exemption must do to comply with New York’s cyber security regulation (23 NYCRR...
Prior articles in the cyber series have concentrated on what it means to be a covered entity. This article transitions into a discussion about what covered entities must do to be in compliance with New York state’s cybersecurity regulation (23 NYCRR 500). This...
When New York state’s cyber security regulation (23 NYCRR 500) was amended at the end of 2023, it included the creation of a new type of covered entity referred to as Class A companies. Due to their size, these companies are required to go above and beyond what...
In the rapidly evolving digital landscape, cybersecurity is more crucial than ever. This is particularly true in New York, where the state's cyber security regulation, 23 NYCRR 500, plays a pivotal role. In part two of the PIA’s cyber series, let's delve into a key...