Techromatic Incorporated is officially

Made in NY and proud of our contributions to the NY tech and digital community.

800-788-8208
212-335-0044
info@techromatic.com

Businesses are affected by 23 NYCRR Part 500 if they are supervised by the NYS DFS. These financial institutions include mortgage brokerages, investment firms, insurance agencies, and  licensed lenders.


This regulation also applies to “Third Party Service Providers." These include companies doing business with New York financial institutions and accessing its sensitive information (ex: law firms and accounting firms).

Which Businesses Are Affected?

You May Qualify For A Limited Exemption!

What Are The Requirements?

To identify and assess internal and external cyber security risks that threaten the confidentiality, integrity, or availability of data.

To implement infrastructure, policies, and procedures, so during a cyber security event an organization can detect, respond to, recover from, and appropriately report it.

Here is a Partial List of Requirements

  • File annual certification of compliance with NY State

  • (first submission by  February 2018)

  • Perform regular Security Risk Assessments, and create and execute remediation plans

  • Document all processes and procedures related to cyber security

  • Create a written incident response plan

  • Conduct regular cyber security training

  • Monitor all assets and maintain a full audit trail

  • Implement administrative, physical, and technical controls

How Can Techromatic Help?

Our Experts will provide resources

and guide your business through the

NYS DFS compliance process.

Techromatic is local—located in Westchester and New York City.

Contact Us Today For
A Free Consultation