NYDFS Cybersecurity Regulation (Part 500): Universal MFA and asset inventory
Tech · Compliance deadlines · Sat, November 1, 2025 · New York · US
500.12 multi-factor authentication for all users and 500.13(a) asset inventory requirements apply. Not legal advice.
Every year
| Date | Event | When |
|---|---|---|
| Wed, Nov 1, 2023 | NYDFS Cybersecurity Regulation (Part 500): Second Amendment effective | 3 yr ago |
| Fri, Dec 1, 2023 | NYDFS Cybersecurity Regulation (Part 500): Amended notification requirements (500.17) | 3 yr ago |
| Mon, Apr 15, 2024 | NYDFS Cybersecurity Regulation (Part 500): Annual compliance notification | 2 yr ago |
| Mon, Apr 29, 2024 | NYDFS Cybersecurity Regulation (Part 500): General 180-day transition ends | 2 yr ago |
| Fri, Nov 1, 2024 | NYDFS Cybersecurity Regulation (Part 500): Governance, encryption, IR/BCDR, exemptions | 2 yr ago |
| Thu, May 1, 2025 | NYDFS Cybersecurity Regulation (Part 500): Vulnerability scans, access privileges, malware controls, Class A monitoring | 17 mo ago |
| Sat, Nov 1, 2025 | NYDFS Cybersecurity Regulation (Part 500): Universal MFA and asset inventory | 11 mo ago |
| Wed, Apr 15, 2026 | NYDFS Cybersecurity Regulation (Part 500): Annual compliance notification | 5 mo ago |
Also on Nov 1, 2025
| Date | Event | When |
|---|---|---|
| Sat, Nov 1, 2025 | All Saints’ Day | 11 mo ago |
| Sat, Nov 1, 2025 | Native American Heritage Month | 11 mo ago |
Source, method and history
- Source
- Regulations
- How we know
- From the Regulations API (regulations.fru.dev), which cites the official text.
- Recurs
- one-off
- More on fru.dev
- regulations.fru.dev
- Feed
- Subscribe to Compliance deadlines
- Changes
- 2026-09-25: added to 2025-11-01