New York Department of Financial Services, Cybersecurity Requirements for Financial Services Companies, 23 NYCRR 500 (Mar. 1, 2017) (full-text).