Skip to content
Cyber Horizon
All frameworks

// Financial

NYDFS 500 Compliance Software

New York Department of Financial Services cybersecurity requirements for covered financial entities.

Take the free readiness checkBook a demo

Framework at a glance

Short name

NYDFS 500

Version

2023

Category

Financial

Controls

14

What NYDFS 500 covers

14 controls across 7 domains — every one tracked, owned and evidenced in Cyber Horizon.

Program

4 controls
  • 500.02 Cybersecurity Program
  • 500.03 Cybersecurity Policy
  • 500.04 Chief Information Security Officer
  • 500.09 Risk Assessment

Testing

1 controls
  • 500.05 Penetration Testing & Vulnerability Assessments

Monitoring

2 controls
  • 500.06 Audit Trail
  • 500.14 Monitoring & Training

Access

2 controls
  • 500.07 Access Privileges
  • 500.12 Multi-Factor Authentication

Supply Chain

1 controls
  • 500.11 Third-Party Service Provider Security

Data

2 controls
  • 500.13 Asset Management & Data Retention
  • 500.15 Encryption of Non-Public Information

Response

2 controls
  • 500.16 Incident Response Plan
  • 500.17 Notices to the Superintendent

How Cyber Horizon automates NYDFS 500

Every NYDFS 500 control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.

Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.

Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.

Frequently asked questions

What is NYDFS 500?

New York Department of Financial Services cybersecurity requirements for covered financial entities.

How many controls does NYDFS 500 have?

NYDFS 500 (2023) has 14 controls in Cyber Horizon's catalogue, organised across 7 domains.

How does Cyber Horizon help with NYDFS 500?

Cyber Horizon maps NYDFS 500 into a shared control library alongside every other framework you run, so evidence collected once counts towards NYDFS 500 and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.

More Financial frameworks

DORA

118 controls

SWIFT CSP

32 controls

SOX ITGC

24 controls

GLBA

24 controls

See NYDFS 500 mapped to your environment

Start with the free 20-question readiness check — no signup — or get a personal walkthrough of NYDFS 500 in Cyber Horizon.

Take the free readiness checkBook a demo