NYDFS ISSUES GUIDANCE ON 3RD PARTY CYBERSECURITY RISKS

Summary from the TLDR InfoSec newsletter

The New York State Department of Financial Services announced new guidance regarding the use of third-party service providers. Third-party suppliers can cause supply chain attacks if attackers compromise them, and can be the weak link in an organization's security strategy. The new guidance does not impose new regulations or restrictions on regulated organizations.