Remove MFA Remove Ransomware Remove Third-Party Service Provider
article thumbnail

New York Bolsters Cybersecurity Requirements

Global Fintech & Digital Assets

The changes impose more demanding requirements for larger entities, new obligations to report ransomware incidents and payments, and expanded oversight responsibilities for board and senior management. The Amendments also require a covered entity to report within 24 hours any extortion payment made in response to a ransomware attack.