NYDFS 500:2023 Assessment and Task Pack is now Live in Production

chris.lyons

The new NYDFS 500:2023 Assessment is now available for use. The assessment was created off of the framework and includes a 1 question to 1 control mapping. Each question was created off of the text of the control. Not all sections of the framework are included in the assessment due to the nature of the framework content.

The following sections are found in the framework, but are not present in the assessment:

500.0 - Introduction

500.1 - Definitions

500:20 - Enforcement

500:21 - Effective Date

500:22 - Transitional Periods

500:23 - Severability

500.24 - Exemptions from Electronic Filing and Submission Requirements

These were not included in the assessment as they are not specifically requirements or controls in the framework, rather they are scenarios that may or may not impact and organizations requirements under the NYDFS:500 framework. These sections are still available in the framework for reference and use in determining applicability to an individual companies responsibilities under the requirements.

If a company conducts and assessment and scores it, they will be able to see under the corresponding program that is created that these sections are available for reference and can be marked as complete if they are not necessary to complete the ongoing management of the program.

The Task Pack was created in the same manner as the assessment with a 1 task to 1 question format. Each task was created from the question in the assessment and will not include the same section that are absent from the assessment above.