{"id":252432,"date":"2026-05-22T09:20:00","date_gmt":"2026-05-22T13:20:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/22\/new-york-issues-cybersecurity-tips-for-a-heightened-threat-environment\/"},"modified":"2026-05-22T09:25:18","modified_gmt":"2026-05-22T13:25:18","slug":"new-york-issues-cybersecurity-tips-for-a-heightened-threat-environment","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/22\/new-york-issues-cybersecurity-tips-for-a-heightened-threat-environment\/","title":{"rendered":"New York Issues Cybersecurity Tips for a \u2018Heightened Threat Environment\u2019"},"content":{"rendered":"

New York Issues Cybersecurity Tips for a \u2018Heightened Threat Environment\u2019<\/a><\/p>\n

https:\/\/www.insurancejournal.com\/news\/east\/2026\/05\/22\/871132.htm<\/a><\/p>\n

Publish Date: 2026-05-22 09:20:00<\/a><\/p>\n

Source Domain: www.insurancejournal.com<\/a><\/p>\n

Citing a need for the financial services industry to be prepared for rising cybersecurity threats, New York\u2019s regulator has issued new guidance.<\/p>\n

The guidance from the New York State Department of Financial Services (DFS) identifies risk management and compliance efforts that banking, insurance and other financial services organizations and individuals should consider taking when they become aware of a \u201cheightened cybersecurity threat environment.\u201d<\/p>\n

DFS defines a \u201cheightened threat environment\u201d as a period when cybersecurity risks are \u201csignificantly elevated and therefore have a high likelihood\u201d of impacting information systems, nonpublic information or operations.<\/p>\n

As an example of a heightened threat environment that may warrant stronger defensive measures and increased vigilance, DFS identifies geopolitical events that have the \u201cpotential to increase the risk of cyberattacks or technological developments that materially change cybersecurity risks, such as the release of frontier AI models.\u201d<\/p>\n

DFS noted that this guidance does not establish new legal requirements. Rather, it identifies best practices regulated entities should consider implementing to the extent not already required by the cybersecurity regulation, 23 NYCRR Part 500.<\/p>\n

\u201cThis guidance gives our regulated entities actionable steps that can be taken when the threat environment intensifies,\u201d said Acting Superintendent Kaitlin Asrow. \u201cEach entity should assess their unique circumstances and operations to identify which steps are warranted.\u201d<\/p>\n

DFS provides a list of best practices firms should consider to reduce the attack surface, improve threat detection and readiness, and improve resilience and response. Examples include:<\/p>\n