Compliance frameworks and training for New York
Lavawall® maps 3 compliance frameworks specific to New York and offers 6 staff training courses written for it. Open a framework for its requirements and assessment tiers; the courses are listed below.
This is general information to help you find the right material, not legal advice. Which rules apply to you depends on your organization.
Compliance frameworks for New York
Staff training for New York
Courses your team can take in the browser, with a short quiz and a completion record. See all Lavawall training.
- NYDFS Cybersecurity Regulation (23 NYCRR 500) (about 38 minutes)
For financial services companies licensed by the New York Department of Financial Services. Covers CISO designation, annual penetration testing, multi-factor authentication, encryption, and the 72-hour breach notifica... - New York Finance and Insurance: Sector Module (about 10 minutes)
For staff of firms regulated by the New York Department of Financial Services: the 72-hour incident notice, extortion payment notice and annual certification under 23 NYCRR 500.17, the insurance circular letter on AI ... - New York Health Information: Sector Module (about 10 minutes)
For staff of New York health care providers and hospitals: patient access rights under Public Health Law s. 18, extra-confidential mental health and HIV-related records, hospital cybersecurity reporting under 10 NYCRR... - New York Privacy and Security (about 25 minutes)
For staff of organizations that hold personal information of New York residents or employ people in New York: what counts as private information, reasonable safeguards, breach reporting, employee monitoring notice, hi... - New York Public Sector: Sector Module (about 10 minutes)
For staff of New York state agencies, municipalities, public authorities and school districts: the Freedom of Information Law, personal privacy rules for records, incident reporting to the Division of Homeland Securit... - New York Transportation and DMV Data: Sector Module (about 10 minutes)
For staff of New York organizations that receive or handle Department of Motor Vehicles data: restricted licence application data, legal process and immigration enforcement requests, data contracts, photo enforcement ...
Also relevant across the United States
- NIST SP 800-171
- FTC Safeguards Rule
- GLBA: Gramm-Leach-Bliley Act
- HIPAA Security Rule
- Sarbanes-Oxley Act (SOX)
- CMMC
- FDA Cybersecurity for Cyber Devices (Section 524B)
- ANSI/AAMI SW96 Medical Device Security Risk Management
All United States frameworks and training
Frameworks that apply anywhere, such as ISO 27001, SOC 2, and NIST, are on the full framework list.
Common questions
Which compliance frameworks does Lavawall cover for New York?
Lavawall maps 3 frameworks specific to New York, including NYDFS Cybersecurity Regulation, New York State privacy and security, New York SHIELD Act (GBL ss. 899-aa and. Each has assessment tiers, questionnaires, and policy templates, and its requirements map to a shared control set so evidence collected once counts everywhere it applies.
Does Lavawall offer security and privacy training for New York?
Yes. Lavawall Training has 6 courses written for New York, each with a short quiz and a completion record you can show an auditor.
Is this legal advice?
No. The frameworks and courses are general information built from the official law and regulator text, to help you find and organize the right material. Ask a lawyer how the rules apply to your organization.