New York’s landmark cybersecurity regulation mandating that insurance companies, banks and other financial institutions establish a cybersecurity program takes effect March 1.The regulation has limited flexibility for companies to tailor cybersecurity programs to their specific needs. But they all must have a program, regardless of the outcome of their respective risk assessments.
Partner Mark Krotoski is quoted.