Cyber Due Diligence Prevents Private Equity, M&A Disasters

Cyber Due Diligence Prevents Private Equity, M&A Disasters

Would you value a potential investment or acquisition target differently if you knew that it had been breached or was at high risk for cyber losses? The $350 million reduction in Yahoo’s valuation after it revealed a two-year-old breach during its sale to Verizon was...
Just Weeks to Meet NYDFS Third-Party Deadline

Just Weeks to Meet NYDFS Third-Party Deadline

The final, and many would say most onerous, phase of the New York Department of Financial Services (NYDFS) Cybersecurity Regulations goes into effect March 1, 2019. Banks, consumer lenders, mortgage brokers, finance agencies and insurance companies operating under New...
NYDFS September 3 Deadline – Are You Ready?

NYDFS September 3 Deadline – Are You Ready?

September 3 marks the next critical deadline for companies covered by the cybersecurity regulations (23 NYCRR Part 500) set forth by the New York Department of Financial Services (NYDFS).  If you’re a regulated entity, are you ready?  Or, are you, like many...
NYDFS September 3 Deadline – Are You Ready?

New York’s Cybersecurity Regulations: One Year into Implementation

It has been almost a year since the New York State Department of Financial Services (NYDFS) Cybersecurity Regulation’s first transitional deadlines went into effect on August 28, 2017. The first of their kind in the United States, other states are looking to the...
Insider Threat: It’s Real and It’s Costly

Insider Threat: It’s Real and It’s Costly

Automotive maker Tesla’s allegation this week that a former employee wrote software that hacked company systems and leaked confidential information and trade secrets highlights once again the very real business risk of insider threat. While much attention is paid to...
Improve Your Third-Party Risk Management Program in Four Steps

Improve Your Third-Party Risk Management Program in Four Steps

News continues to break on organizations facing fines, data loss, and shutdowns due to a lack of due diligence in their vendor selection process and the introduction of new vulnerabilities into their environment. Most recently, Delta, Sears, and four energy companies...