At a glance
- Short name
- Cyber Insurance
- Issuing / stewarding body
- New York DFS
- Sectors
- Insurance, All, Technology, Healthcare, Biotech & Life Sciences, Finance
- Also known as / related labels
- NYDFS Circular Letter No. 2 (2021) · 23 NYCRR Part 500
What this entry covers
Cyber insurance has no single governing framework; insurers assess each applicant’s cyber risk as part of their own underwriting. The main public regulator document is the New York Department of Financial Services Insurance Circular Letter No. 2 (2021), the Cyber Insurance Risk Framework, which applies to authorized property/casualty insurers that write cyber insurance. It expects insurers to assess the cyber risk of each insured and potential insured, and notes that insurers must also comply with the DFS cybersecurity regulation, 23 NYCRR 500.
MyRHC indexes this framework so practitioners, auditors, and automated agents can find the authoritative primary sources in one place. This page is a navigation aid; it is not legal advice and is not a substitute for the official text.
Official documentation
- Primary official source: https://www.dfs.ny.gov/industry_guidance/circular_letters/cl2021_02
- CISA cybersecurity insurance reports (archived page, revision date 2020-12-17): https://www.cisa.gov/resources-tools/resources/cybersecurity-insurance-reports
How to use this index entry
- Open the official link above (or the agency home if the deep link drifts).
- Confirm edition / revision date against your program scope.
- Map applicability by sector and jurisdiction listed in the metadata.
- Follow related frameworks only after checking their own official sources.
Disclaimers
- MyRHC does not host proprietary standards text (ISO, some industry bodies).
- Where standards are paywalled, we link to the publisher’s catalog page.
- Always verify current requirements with counsel and the issuing authority.