December 2021

NYDFS Announces Statement of Charges Hearing against First American Financial

Subsequent to the first ever cybersecurity enforcement action filed by The New York State Department of Financial Services (NYDFS) on July 22, 2020, a Statement of Charges Hearing will be held on January 21, 2022, to determine whether First American Title Insurance Company has committed violations of §§ 500.02, 500.03, 500.04, 500.07, 500.09, 500.10, 500.14, 500.15…

Capital One Hacks

In the summer of 2019, Capital One discovered that a hacker had accessed private data for more than 100 million Capital One customers, including data that was part of their credit card applications, such as…

NYDFS Issued Industry Guidance on Multi-Factor Authentication

On December 7, 2021, the New York Department of Financial Services (NYDFS) issued Industry Guidance for all regulated entities on Multi-Factor Authentication (MFA) as an essential technical control required by the Cybersecurity Requirements for Financial…

Hardening Systems of Private Data

We all focus on Endpoint and Network Security but too often overlook software and how security settings should be hardened. For example, when you start to use a software, it is usually configured generically by…