{"id":5001,"date":"2023-09-01T15:04:11","date_gmt":"2023-09-01T15:04:11","guid":{"rendered":"https:\/\/securendsolution.com\/?p=5001"},"modified":"2023-09-01T16:33:47","modified_gmt":"2023-09-01T16:33:47","slug":"onemain-financial","status":"publish","type":"post","link":"https:\/\/securendsolution.com\/5001\/","title":{"rendered":"FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"5001\" class=\"elementor elementor-5001\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3ade13ed elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3ade13ed\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-29e85143\" data-id=\"29e85143\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-349fba4e elementor-widget elementor-widget-jkit_post_title\" data-id=\"349fba4e\" data-element_type=\"widget\" data-widget_type=\"jkit_post_title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div  class=\"jeg-elementor-kit jkit-post-title jeg_module___6637b2108b616\" ><h2 class=\"post-title style-color \">FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES<\/h2><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c186c9e elementor-widget__width-auto elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"2c186c9e\" data-element_type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<div class=\"elementor-icon\">\n\t\t\t<i aria-hidden=\"true\" class=\"jki jki-calendar-1-light\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26af664f elementor-widget__width-auto elementor-widget elementor-widget-jkit_post_date\" data-id=\"26af664f\" data-element_type=\"widget\" data-widget_type=\"jkit_post_date.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div  class=\"jeg-elementor-kit jkit-post-date jeg_module__1_6637b2108cc06\" ><p class=\"post-date \">September 1, 2023<\/p><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-111b77e9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"111b77e9\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-203b7b08\" data-id=\"203b7b08\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2f990a elementor-widget elementor-widget-heading\" data-id=\"2f990a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 30-04-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">NYSDFS Announces $4,250,000.00 Penalty for Cybersecurity Control Failures<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-58f7f893 elementor-widget elementor-widget-text-editor\" data-id=\"58f7f893\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 30-04-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>On May 25th, 2023 NYSDFS published a <a href=\"https:\/\/www.dfs.ny.gov\/reports_and_publications\/press_releases\/pr202305251\">press release<\/a> which announced OneMain Financial Group, LLC failed to <em>&#8220;effectively manage third-party service provider risk, manage access privileges, and maintain a formal application security development methodology, significantly increasing the company\u2019s vulnerability to cybersecurity events.&#8221;. <\/em>Resulting in a&nbsp;<a href=\"https:\/\/www.dfs.ny.gov\/system\/files\/documents\/2023\/05\/ea20230524_co_onemain.pdf\" target=\"_blank\">$4.25 million dollar settlement.<\/a>&nbsp;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ffbf48c elementor-widget elementor-widget-jkit_post_featured_image\" data-id=\"6ffbf48c\" data-element_type=\"widget\" data-widget_type=\"jkit_post_featured_image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div  class=\"jeg-elementor-kit jkit-post-featured-image jeg_module__2_6637b21090dd6\" ><div class=\"post-featured-image \"><img fetchpriority=\"high\" decoding=\"async\" width=\"1280\" height=\"720\" src=\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\" class=\"attachment-full size-full wp-post-image\" alt=\"\" srcset=\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png 1280w, https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK-300x169.png 300w, https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK-1024x576.png 1024w, https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK-768x432.png 768w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" \/><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-75561142 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"75561142\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-441df877\" data-id=\"441df877\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3a07365d elementor-widget elementor-widget-heading\" data-id=\"3a07365d\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">What were the cybersecurity deficiencies?<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7bf89a6d elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"7bf89a6d\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/securendsolution.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">BCDR Policy lacking critical information<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Access Privilege review was not conducted<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Shared User Accounts<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Passwords stored in \"PASSWORDS\" folder lacking security measures<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Lacking quality assurance policies and procedures<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Lacking qualified cybersecurity personnel<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Lack\/failure of annual cybersecurity employee training<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Non-timely due diligence for high-risk vendors<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Failure to monitor third-party vendors<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">2018 breach of the firm's emails<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">2020 online portal leak of loan documents containing NPI<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea51ba0 elementor-widget elementor-widget-heading\" data-id=\"ea51ba0\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Overview of Violations  of Law and Regulations<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e969e4d elementor-widget elementor-widget-text-editor\" data-id=\"5e969e4d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>1. Failed to implement and maintain their BCDR plan and resources 500.03(e).<\/strong><\/p><p>The business continuity and disaster recovery plan (BCDR) was found to have lacked some critical components which included a call tree, vendor list, emergency contact list, instructions on performing backup tests, and technical diagrams of the systems and networks.<\/p><p>\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e6fc463 elementor-widget elementor-widget-text-editor\" data-id=\"e6fc463\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>2. Failed to maintain and review user access privileges, in violation of 23<br \/>NYCRR \u00a7 500.07.<\/strong><\/p><p>There were multiple findings related to access privileges which resulted in the violation of section 500.07.\u00a0<\/p><ol><li>\u00a0A manual review process for over 11,000+ accounts conducted by the INFOSEC team on a periodic basis.\u00a0<\/li><li>The use local administrative users sharing accounts.\u00a0<\/li><li>Accounts used the default password provided during the time of onboarding.\u00a0<\/li><li>Passwords found in a shared directory where access was not adequately restricted. A folder named &#8220;PASSWORDS&#8221; contained a file that could be moved, deleted, or renamed.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6216fbc elementor-widget elementor-widget-text-editor\" data-id=\"6216fbc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>4. Failed to implement policies and procedures that protected Information<br \/>Systems and NPI during application development, in violation of 23 NYCRR \u00a7 500.08.<\/strong><\/p><p>This section relates to policies and procedures used to protect the network and systems during application development. There were deficiencies with polices found:\u00a0<\/p><ul><li>Lacked a formalized methodology for project administration\u00a0<\/li><li>Project administration\/framework lacked key development life cycle phases<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c0bb4bb elementor-widget elementor-widget-text-editor\" data-id=\"c0bb4bb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>4. Failed to provide its cybersecurity personnel with training sufficient to<br \/>address relevant cybersecurity risks and failed to verify that key cybersecurity personnel take steps to maintain current knowledge of changing cybersecurity threats and countermeasures, in violation of 23 NYCRR \u00a7 500.10.<\/strong><\/p><p>\u00a0<\/p><p>500.10 relates to training for cybersecurity threats, vulnerabilities, and testing. The findings:<\/p><ul><li>Failed to implement training for over 500 information technology employees\u00a0<\/li><li>Failure to provide secure coding training for developers<\/li><li>Failed to verify key cybersecurity personnel take steps to maintain cybersecurity knowledge up-to-date<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eadd563 elementor-widget elementor-widget-text-editor\" data-id=\"eadd563\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>5. Failed to ensure the security of the NPI that was accessible to, or held<\/strong><br><strong>by, its third-party service providers, in violation of 23 NYCRR \u00a7 500.11(a)<\/strong><\/p>\n<p>500.11 is all about third-party service vendors and their inherent risk to the internal network. The following findings were discovered:<\/p>\n<ul>\n<li>failed to conduct timely due-diligence for high-risk and medium-risk vendors.&nbsp;<\/li>\n<li>allowed third-party vendors to begin working prior to completing the onboarding security questionnaire and third-party information risk acceptance.&nbsp;<\/li>\n<li>Failure to adjust the risk-score of third-party vendors precipitated by vendors&#8217; improper handling of NPI and poor cybersecurity controls.&nbsp;<\/li>\n<\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-6afad244 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6afad244\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-77d1358a\" data-id=\"77d1358a\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6d79b77a elementor-widget__width-auto elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"6d79b77a\" data-element_type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<div class=\"elementor-icon\">\n\t\t\t<i aria-hidden=\"true\" class=\"jki jki-quote-light\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-33956b49 elementor-widget elementor-widget-text-editor\" data-id=\"33956b49\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><em>OneMain shall continue to strengthen and remediate its controls and procedures to<\/em><br \/><em>protect its cybersecurity systems and consumers\u2019 NPI in accordance with the relevant provisions<\/em><br \/><em>and definitions of 23 NYCRR Part 500. Within one hundred and eighty (180) days of the date of<\/em><br \/><em>this Consent Order&#8221;\u00a0<\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-a4ee068 elementor-widget elementor-widget-text-editor\" data-id=\"a4ee068\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Remediation(s)<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-94acb25 elementor-widget elementor-widget-text-editor\" data-id=\"94acb25\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Remediation is to occur within 180 days, which includes updates to the BCDR policy, a plan to review and maintain user access rights, maintain policies for NPI handling and Information Systems during application development, introduce training for cybersecurity risks, and update policies to ensure protection of NPI by third-parties.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-213d5ff2 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"213d5ff2\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 30-04-2024 *\/\n.elementor-widget-divider{--divider-border-style:none;--divider-border-width:1px;--divider-color:#0c0d0e;--divider-icon-size:20px;--divider-element-spacing:10px;--divider-pattern-height:24px;--divider-pattern-size:20px;--divider-pattern-url:none;--divider-pattern-repeat:repeat-x}.elementor-widget-divider .elementor-divider{display:flex}.elementor-widget-divider .elementor-divider__text{font-size:15px;line-height:1;max-width:95%}.elementor-widget-divider .elementor-divider__element{margin:0 var(--divider-element-spacing);flex-shrink:0}.elementor-widget-divider .elementor-icon{font-size:var(--divider-icon-size)}.elementor-widget-divider .elementor-divider-separator{display:flex;margin:0;direction:ltr}.elementor-widget-divider--view-line_icon .elementor-divider-separator,.elementor-widget-divider--view-line_text .elementor-divider-separator{align-items:center}.elementor-widget-divider--view-line_icon .elementor-divider-separator:after,.elementor-widget-divider--view-line_icon .elementor-divider-separator:before,.elementor-widget-divider--view-line_text .elementor-divider-separator:after,.elementor-widget-divider--view-line_text .elementor-divider-separator:before{display:block;content:\"\";border-block-end:0;flex-grow:1;border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--element-align-left .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-left .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-left .elementor-divider__element{margin-left:0}.elementor-widget-divider--element-align-right .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-right .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-right .elementor-divider__element{margin-right:0}.elementor-widget-divider--element-align-start .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-start .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-start .elementor-divider__element{margin-inline-start:0}.elementor-widget-divider--element-align-end .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-end .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-end .elementor-divider__element{margin-inline-end:0}.elementor-widget-divider:not(.elementor-widget-divider--view-line_text):not(.elementor-widget-divider--view-line_icon) .elementor-divider-separator{border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--separator-type-pattern{--divider-border-style:none}.elementor-widget-divider--separator-type-pattern.elementor-widget-divider--view-line .elementor-divider-separator,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:after,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:before,.elementor-widget-divider--separator-type-pattern:not([class*=elementor-widget-divider--view]) .elementor-divider-separator{width:100%;min-height:var(--divider-pattern-height);-webkit-mask-size:var(--divider-pattern-size) 100%;mask-size:var(--divider-pattern-size) 100%;-webkit-mask-repeat:var(--divider-pattern-repeat);mask-repeat:var(--divider-pattern-repeat);background-color:var(--divider-color);-webkit-mask-image:var(--divider-pattern-url);mask-image:var(--divider-pattern-url)}.elementor-widget-divider--no-spacing{--divider-pattern-size:auto}.elementor-widget-divider--bg-round{--divider-pattern-repeat:round}.rtl .elementor-widget-divider .elementor-divider__text{direction:rtl}.e-con-inner>.elementor-widget-divider,.e-con>.elementor-widget-divider{width:var(--container-widget-width,100%);--flex-grow:var(--container-widget-flex-grow)}<\/style>\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-20561515 jkit-sticky-element--enabled jkit-sticky-element-on--down jkit-sticky-position--sticky\" data-id=\"20561515\" data-element_type=\"column\" data-settings=\"{&quot;jkit_sticky_device&quot;:[&quot;desktop&quot;,&quot;tablet&quot;,&quot;mobile&quot;],&quot;jkit_sticky_top_position&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:0,&quot;sizes&quot;:[]}}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-752dca84 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"752dca84\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-24237638\" data-id=\"24237638\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-44284043 elementor-widget elementor-widget-heading\" data-id=\"44284043\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Are you compliant with NYSDFS?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3bbba848 elementor-widget elementor-widget-text-editor\" data-id=\"3bbba848\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Discover if your network meets the highest security standards with confidence.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6598604f elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"6598604f\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-map-marker-alt\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">70 Charles Lindbergh Blvd, Suite 4. Uniondale, New York 11553<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-phone-alt\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">(+1) 844-WEKNOW1<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-envelope\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">info@securendsolution.com<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-7be32a89 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7be32a89\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-2feb9a05\" data-id=\"2feb9a05\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9c67ce9 elementor-widget elementor-widget-heading\" data-id=\"9c67ce9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Free Resources<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4924c13d elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"4924c13d\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.dfs.ny.gov\/industry_guidance\/cybersecurity\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">DFS.NY.GOV Industry Guidance<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/cyberriskinstitute.org\/the-profile\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"jki jki-check-light\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Cyber Risk Institute Risk Profile<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"mailto:info@securendsolution.com\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Cybersecurity Policy Templates<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES September 1, 2023 NYSDFS Announces $4,250,000.00 Penalty for Cybersecurity Control Failures On May 25th, 2023 NYSDFS published a press release which announced OneMain Financial Group, LLC failed to &#8220;effectively manage third-party service provider risk, manage access privileges, and maintain a formal application security development methodology, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5019,"comment_status":"closed","ping_status":"open","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[12,11,9],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>NYSDFS $4.25M Fine for Cybersecurity Control Failures<\/title>\n<meta name=\"description\" content=\"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege&#039;s, and BCDR policy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/securendsolution.com\/5001\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NYSDFS $4.25M Fine for Cybersecurity Control Failures\" \/>\n<meta property=\"og:description\" content=\"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege&#039;s, and BCDR policy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securendsolution.com\/5001\/\" \/>\n<meta property=\"og:site_name\" content=\"Secure End Solution | Managed IT Security Services\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-01T15:04:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-01T16:33:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Oakcreatives\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oakcreatives\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/securendsolution.com\/5001\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/\"},\"author\":{\"name\":\"Oakcreatives\",\"@id\":\"https:\/\/securendsolution.com\/#\/schema\/person\/46cb059fe7b0d2bfa58d394df4a24204\"},\"headline\":\"FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES\",\"datePublished\":\"2023-09-01T15:04:11+00:00\",\"dateModified\":\"2023-09-01T16:33:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/\"},\"wordCount\":653,\"publisher\":{\"@id\":\"https:\/\/securendsolution.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\",\"articleSection\":[\"Compliance\",\"Cyber News\",\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/securendsolution.com\/5001\/\",\"url\":\"https:\/\/securendsolution.com\/5001\/\",\"name\":\"NYSDFS $4.25M Fine for Cybersecurity Control Failures\",\"isPartOf\":{\"@id\":\"https:\/\/securendsolution.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\",\"datePublished\":\"2023-09-01T15:04:11+00:00\",\"dateModified\":\"2023-09-01T16:33:47+00:00\",\"description\":\"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege's, and BCDR policy.\",\"breadcrumb\":{\"@id\":\"https:\/\/securendsolution.com\/5001\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/securendsolution.com\/5001\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securendsolution.com\/5001\/#primaryimage\",\"url\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\",\"contentUrl\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/securendsolution.com\/5001\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/securendsolution.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/securendsolution.com\/#website\",\"url\":\"https:\/\/securendsolution.com\/\",\"name\":\"Secure End Solution | Managed IT Security Services\",\"description\":\"MSP\/MSSP | Cyber Security Services &amp; IT Support\",\"publisher\":{\"@id\":\"https:\/\/securendsolution.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/securendsolution.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/securendsolution.com\/#organization\",\"name\":\"Secure End Solution | Managed IT Security Services\",\"url\":\"https:\/\/securendsolution.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securendsolution.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2022\/03\/cropped-Logo-4.png\",\"contentUrl\":\"https:\/\/securendsolution.com\/wp-content\/uploads\/2022\/03\/cropped-Logo-4.png\",\"width\":2000,\"height\":572,\"caption\":\"Secure End Solution | Managed IT Security Services\"},\"image\":{\"@id\":\"https:\/\/securendsolution.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/securendsolution.com\/#\/schema\/person\/46cb059fe7b0d2bfa58d394df4a24204\",\"name\":\"Oakcreatives\",\"sameAs\":[\"https:\/\/securendsolution.com\"],\"url\":\"https:\/\/securendsolution.com\/author\/oakcreatives\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NYSDFS $4.25M Fine for Cybersecurity Control Failures","description":"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege's, and BCDR policy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/securendsolution.com\/5001\/","og_locale":"en_US","og_type":"article","og_title":"NYSDFS $4.25M Fine for Cybersecurity Control Failures","og_description":"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege's, and BCDR policy.","og_url":"https:\/\/securendsolution.com\/5001\/","og_site_name":"Secure End Solution | Managed IT Security Services","article_published_time":"2023-09-01T15:04:11+00:00","article_modified_time":"2023-09-01T16:33:47+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png","type":"image\/png"}],"author":"Oakcreatives","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oakcreatives","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/securendsolution.com\/5001\/#article","isPartOf":{"@id":"https:\/\/securendsolution.com\/5001\/"},"author":{"name":"Oakcreatives","@id":"https:\/\/securendsolution.com\/#\/schema\/person\/46cb059fe7b0d2bfa58d394df4a24204"},"headline":"FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES","datePublished":"2023-09-01T15:04:11+00:00","dateModified":"2023-09-01T16:33:47+00:00","mainEntityOfPage":{"@id":"https:\/\/securendsolution.com\/5001\/"},"wordCount":653,"publisher":{"@id":"https:\/\/securendsolution.com\/#organization"},"image":{"@id":"https:\/\/securendsolution.com\/5001\/#primaryimage"},"thumbnailUrl":"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png","articleSection":["Compliance","Cyber News","Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/securendsolution.com\/5001\/","url":"https:\/\/securendsolution.com\/5001\/","name":"NYSDFS $4.25M Fine for Cybersecurity Control Failures","isPartOf":{"@id":"https:\/\/securendsolution.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/securendsolution.com\/5001\/#primaryimage"},"image":{"@id":"https:\/\/securendsolution.com\/5001\/#primaryimage"},"thumbnailUrl":"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png","datePublished":"2023-09-01T15:04:11+00:00","dateModified":"2023-09-01T16:33:47+00:00","description":"NYSDFS Press Releases, framework, penalty to NYSDFS. Failed to manage third-party service provider risks, access privilege's, and BCDR policy.","breadcrumb":{"@id":"https:\/\/securendsolution.com\/5001\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securendsolution.com\/5001\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securendsolution.com\/5001\/#primaryimage","url":"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png","contentUrl":"https:\/\/securendsolution.com\/wp-content\/uploads\/2023\/09\/MORTGAGE-BANK.png","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/securendsolution.com\/5001\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securendsolution.com\/"},{"@type":"ListItem","position":2,"name":"FINANCIAL GROUP FINED $4.25 MILLION FOR NYSDFS CYBERSECURITY CONTROL FAILURES"}]},{"@type":"WebSite","@id":"https:\/\/securendsolution.com\/#website","url":"https:\/\/securendsolution.com\/","name":"Secure End Solution | Managed IT Security Services","description":"MSP\/MSSP | Cyber Security Services &amp; IT Support","publisher":{"@id":"https:\/\/securendsolution.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securendsolution.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/securendsolution.com\/#organization","name":"Secure End Solution | Managed IT Security Services","url":"https:\/\/securendsolution.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securendsolution.com\/#\/schema\/logo\/image\/","url":"https:\/\/securendsolution.com\/wp-content\/uploads\/2022\/03\/cropped-Logo-4.png","contentUrl":"https:\/\/securendsolution.com\/wp-content\/uploads\/2022\/03\/cropped-Logo-4.png","width":2000,"height":572,"caption":"Secure End Solution | Managed IT Security Services"},"image":{"@id":"https:\/\/securendsolution.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/securendsolution.com\/#\/schema\/person\/46cb059fe7b0d2bfa58d394df4a24204","name":"Oakcreatives","sameAs":["https:\/\/securendsolution.com"],"url":"https:\/\/securendsolution.com\/author\/oakcreatives\/"}]}},"_links":{"self":[{"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/posts\/5001"}],"collection":[{"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/comments?post=5001"}],"version-history":[{"count":16,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/posts\/5001\/revisions"}],"predecessor-version":[{"id":5020,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/posts\/5001\/revisions\/5020"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/media\/5019"}],"wp:attachment":[{"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/media?parent=5001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/categories?post=5001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securendsolution.com\/wp-json\/wp\/v2\/tags?post=5001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}