New York State Department of Financial Services (NYDFS)
Cybersecurity (NYCRR 500)
Compliance Assessment Template
An Excel-native smart Compliance Assessment Template based on hyperlinked authoritative sources, designed to help you produce credible, inspection-ready outputs.
What does the Cybersecurity (NYCRR 500) template cover?
Cybersecurity (NYCRR 500) addresses the following areas:
- Cybersecurity Program
- Cybersecurity Policy
- Chief Information Security Officer
- Penetration Testing and Vulnerability Assessments
- Audit Trail
- Access Privileges
- Application Security
- Risk Assessment
- Cybersecurity Personnel and Intelligence
- Third Party Service Provider Security Policy
- Multi-Factor Authentication
- Limitations on Data Retention
- Training and Monitoring
- Encryption of Nonpublic Information
- Incident Response Plan
- Notification of Cybersecurity Event(s) Confidentiality
Can I adapt my own compliance materials into a smart Template?
Yes. If you already have compliance materials of your own, you can integrate them into a smart Compliance Template using the included development template. This allows you to supplement NORVA’s Compliance Assessment Templates with your own content while keeping the same practical, structured approach.
Is my data private and secure?
Yes. All templates are encrypted to protect the privacy and confidentiality of your data. NORVA Solutions does not have visibility into any data you enter in your downloaded template.