cc3976fb7f
- Split competitive-analysis-2026-05.org → TOC + 9 competitor files in ideas/competitors/. Dropped date from filename. All competitor UUIDs generated, TOC keeps original UUID for backlink continuity. - Deleted passepartout-economics.org archive (replaced by 27-node KB). - Inlined 5 'See also' blocks into natural prose (compliance-index, first-mover-window, revenue-table, orders-of-magnitude-time, native-org-knowledge-base). - Linked 7 orphan compliance pages back to compliance index + finished truncated sentences. - Linked all 14 Agora requirement docs from topic-relevant pages (identity→lisp-machine-security, infrastructure→compute-marketplace, social-space→growth-strategy, exchange→agora-contracts, etc.). - Linked ai-industry-impact from investment-thesis, sufficiency-flip, verification-appliance, effects-growth-flywheel (up from 1 to 10+ pages). - Fixed CREATED timestamps to use git commit dates instead of today. - Made all links absolute from root (no port inheritance). - Removed stale agora/docs/ duplicate content.
28 lines
1.2 KiB
Org Mode
28 lines
1.2 KiB
Org Mode
:PROPERTIES:
|
|
:ID: 581666ba-f72c-406b-8556-93876d2b30bf
|
|
:ID: auto-ny-dfs-500
|
|
:CREATED: [2026-05-23 Sat]
|
|
:END:
|
|
#+title: NY DFS 500 (New York Cybersecurity Regulation)
|
|
#+filetags: :passepartout:compliance:framework:ny:
|
|
|
|
|
|
** NY DFS 500 (23 NYCRR 500)
|
|
|
|
New York State Department of Financial Services cybersecurity regulation for
|
|
financial services. The most aggressive US state-level financial cybersecurity
|
|
rule. Requires: risk assessment, penetration testing, multi-factor authentication,
|
|
incident response plan, annual certification of compliance by the board.
|
|
|
|
Who must comply: Any entity regulated by NY DFS — banks, insurers, mortgage
|
|
brokers, virtual currency companies operating in New York. ~3,000 institutions.
|
|
|
|
Penalties: $200K-$1M per violation; business license revocation possible.
|
|
|
|
Why it matters: The annual board certification requirement creates demand for
|
|
verifiable evidence of control effectiveness — exactly what the gate stack
|
|
produces. First-mover advantage is significant (few vendors target NY DFS 500
|
|
specifically) and the regulation is a template that other states are adopting.
|
|
|
|
Part of the [[id:e4a7b3d2-1c9f-4b6e-8a2d-5f3c7e1b9a0c][compliance framework index]].
|