<h2>Deadline: 2026-04-15</h2><p><strong>30 days remaining</strong> until the NYDFS Part 500 - Annual Certification Filing deadline.</p><h3>Overview</h3><p>Covered entities must file annual certifications of compliance with NYDFS Cybersecurity Regulation (23 NYCRR Part 500), including the November 1, 2025 amendments requiring expanded MFA for all information system access and written asset inventory procedures. This is the first certification cycle that includes the final tranche of Second Amendment requirements.</p><h3>Requirements Checklist</h3><ul><li>Complete annual cybersecurity certification filing</li><li>Verify expanded MFA for all information system access</li><li>Document written asset inventory procedures</li><li>Review compliance with Second Amendment requirements</li><li>Submit certification to NYDFS portal</li></ul><h3>Penalty for Non-Compliance</h3><p>NYDFS can impose civil monetary penalties, issue consent orders, and revoke licenses for non-compliance.</p><h3>Who This Applies To</h3><ul><li>Banks licensed in New York</li><li>Insurance companies in New York</li><li>Financial services firms in New York</li><li>Mortgage companies operating in New York</li></ul>