NYDFS Cybersecurity Regulations: First Annual Compliance Certification Due

Organizations that are liable to New York's Cybersecurity Regulation are moving rapidly to finish their consistence commitments under the Cybersecurity Regulation, as the second "due date" rapidly approaches – February 15, 2018. By August 28, 2017, Covered Entities were required to have a cybersecurity program set up, and also a board (or senior officer) affirmed composed cybersecurity arrangement and Chief Information Security Officer to help ensure information and frameworks. They additionally ended up committed to report cybersecurity occasions to the NYDFS.

By February 15, 2018, Covered Entities must agree to extra commitments under the NY Cybersecurity Regulation including: usage of a formal, composed Cybersecurity Program and Cybersecurity Policy, confinements/limitations on get to benefits to data frameworks that give access to nonpublic data, use of qualified cybersecurity work force (inside or through qualified outsider suppliers), assignment of another main data security officer and improvement of a composed Incident Response Plan. By February 15, 2018, Covered Entities must document their first yearly accreditation of consistence with the Cybersecurity Regulations.

The NYDFS has been helping Covered Entities with consistence inquiries through its much of the time made inquiries ("FAQs") and replies on the NYDFS site, initially distributed on June 20, 2017 and refreshed most as of late on December 12, 2017. The now 26 inquiries in the FAQs segment address the kinds of substances that fall inside the extent of the Cybersecurity Regulations, the notice prerequisites going to a Cybersecurity Event (as characterized in the directions), the yearly confirmation necessity, and extra particular components of the tenets.

The NYDFS Cybersecurity Regulations (distributed at 23 NYCRR 500.01) put forward the base necessities for NYDFS-directed elements to address cybersecurity hazard. For foundation, see our report, "NYDFS issues last cybersecurity directions, setting new industry standard for cybersecurity controls".

CCEP-I Dumps Exam Question No 3:

Question No 3:

An employee allegedly embezzled funds during the course of operating the company’s petroleum
business. The compliance and ethics professional became aware of the allegation through a
specific document requested by law enforcement. The compliance and ethics professional should
immediately:

A. Conduct its own investigation and report its finding to the legal counsel to avoid embarrassment.
B. Discuss the matter with the legal counsel to preserve any applicable privilege during the investigation.
C. Discuss the matter with the Board of Directors to see advice regarding preserving the company’s reputation.
D. Conduct an investigation with the assistance of an external auditor to preserve independence.

Answer: B

CCEP-I Dumps Exam Question No 2

Question No 2:

A company uses 5,000 third parties to accomplish business tasks. Which of the following steps should the compliance and ethics professional take to require third parties to comply with the company's ethics and compliance standards?

A. Read the third party's code of conduct.
B. Include the standards in the third-party contract.
C. Conduct due diligence on the third party.
D. Communicate the standards to the third party.

Answer: B

CCEP-I Dumps Exam Question No 1

Question No 1:

Which of the following is the BEST way to ensure compliance and ethics program resources are budgeted effectively?

A. Review educational activities.
B. Interview senior managers.
C. Conduct a risk assessment.
D. Consult other departments.

Answer: D