Compliance
What audit trails does NYDFS 500.6 expect engineers to keep?
NYDFS 500.6 asks for systems that can reconstruct material transactions and audit trails that help detect cyber events, kept five years. What to log.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
What are the three vulnerability duties in NYDFS 500.5?
NYDFS 500.5 asks for annual penetration tests, risk-set scan frequency, monitoring for new vulnerabilities, and timely, risk-ordered fixes. Plain words.
Oct 19, 20264 min read
Compliance
Which 15 topics must a NYDFS cybersecurity policy cover?
NYDFS 500.3 lists 15 policy areas, approved annually by a senior officer or board. Here is each topic mapped to the engineering document that backs it.
Oct 19, 20264 min read
Compliance
Which NYDFS sections still apply under the limited exemption?
NYDFS 500.19 exempts small covered entities from some sections, not all. Which duties remain for engineering, the filing deadline, and the 180-day rule.
Oct 19, 20263 min read
Compliance
What evidence supports the NYDFS annual compliance filing?
The NYDFS April 15 filing must rest on data and documentation, kept five years. Here is the engineering evidence worth collecting through the year.
Oct 19, 20264 min read
Compliance
What must a NYDFS incident response plan contain?
NYDFS 500.16 lists nine areas an incident response plan must address, including ransomware, backups and root cause analysis. A checklist for engineers.
Oct 19, 20264 min read
Compliance
How do you prove the annual backup restore test under NYDFS?
NYDFS 500.16(d) requires testing your ability to restore critical data from backups at least annually. What to restore, measure and record as proof.
Oct 19, 20263 min read
Compliance
What must a NYDFS asset inventory record for each system?
NYDFS 500.13 requires a complete, accurate, documented asset inventory with five tracked fields and an update schedule. Here is what engineers record.
Oct 19, 20264 min read
Compliance
What should engineering check before a vendor touches NYDFS data?
NYDFS 500.11 asks for vendor risk assessment, minimum practices, due diligence and periodic reassessment. The technical checklist engineers can run.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.