New York utility cybersecurity and privacy audit planning set

Planning edition October 15, 2026. Read the planning pack and review report, then establish entity applicability in the editable workbook.

Utility status alone does not establish NYDFS Part 500 coverage. PSC Part 1200, legacy utility PII orders, private-information safeguards and state/local notification procedures have separate scope tests.

1. Planning pack (52 pages, 15 fillable fields)
2. Review findings and unresolved authority (16 pages)
3. Editable project workbook (13 worksheets)
4. Source register (23 sources)

Before adoption

Resolve Q01-Q10, including first-year audit/certification timing, apparent drafting errors, entity-specific DPS criteria, ownership and current data-access instruments. Record technical, compliance and operating approvals only after actual review.

Keep completed records and evidence in the approved controlled location. Use references and synthetic records. This set does not authorize access to systems or live tests.