{"id":98780,"date":"2025-12-12T15:01:13","date_gmt":"2025-12-12T20:01:13","guid":{"rendered":"https:\/\/www.mcguirewoods.com\/?post_type=news&p=98780"},"modified":"2025-12-12T15:03:05","modified_gmt":"2025-12-12T20:03:05","slug":"in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance","status":"publish","type":"news","link":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/","title":{"rendered":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance"},"content":{"rendered":"\n

McGuireWoods associate Nathanael Williams<\/a> and partners David Hirsch<\/a>, Andrew Konia<\/a> and Todd Beaton<\/a> authored an \u201cExpert Analysis\u201d column for Law360<\/em><\/a> on new guidance released by the New York Department of Financial Services (NYDFS) regarding management of cybersecurity risks associated with third-party service providers.<\/p>\n\n\n\n

In the Dec. 2. 2025, article, the authors cautioned that while companies may outsource critical technology services, and increasingly do so, they must still retain responsibility for cybersecurity oversight.<\/p>\n\n\n\n

\u201cRegulated entities should review and, where necessary, enhance their third-party risk management frameworks to ensure alignment with regulatory expectations and industry best practices,\u201d the authors concluded.<\/p>\n\n\n\n

The Law360 <\/em>analysis covered key themes for business leaders, including regulatory compliance and enforcement, heightened scrutiny of third-party risks, monitoring and oversight, and considerations for selecting and contracting with vendors and terminating third-party service provider relationships. The authors discussed practical implications for regulated entities, such as the importance of board and senior leadership engagement, risk management, proper documentation and regular reviews for improvement of services.<\/p>\n\n\n\n

The article was first published on McGuireWoods\u2019 Password Protected<\/a> blog.<\/p>\n","protected":false},"excerpt":{"rendered":"

McGuireWoods associate Nathanael Williams and partners David Hirsch, Andrew Konia and Todd Beaton authored an \u201cExpert Analysis\u201d column for Law360 on new guidance released by the New York Department of…<\/p>\n","protected":false},"author":4,"featured_media":0,"template":"","tags":[],"industry_tax":[],"international_tax":[],"location_tax":[79,74,68,62],"media_role":[],"news_type":[2416],"people_tax":[1658,3071,3550,3666],"practice_tax":[173],"site_tax":[2],"class_list":["post-98780","news","type-news","status-publish","hentry","news_type-in-the-news","practice_tax-data-privacy-cybersecurity"],"acf":[],"links_out":[{"id":77810,"title":"Nathanael F. Williams","url":"https:\/\/www.mcguirewoods.com\/people\/w\/nathanael-f-williams\/","published":"2024-11-12 16:41:29","blog_id":2},{"id":75089,"title":"David L. Hirsch","url":"https:\/\/www.mcguirewoods.com\/people\/h\/david-l-hirsch\/","published":"2024-08-17 03:20:00","blog_id":2},{"id":50887,"title":"Todd M. Beaton, Jr.","url":"https:\/\/www.mcguirewoods.com\/people\/b\/todd-m-beaton\/","published":"2023-08-24 15:55:34","blog_id":2},{"id":994,"title":"C. Andrew Konia","url":"https:\/\/www.mcguirewoods.com\/people\/k\/c-andrew-konia\/","published":"2018-07-22 06:51:19","blog_id":2}],"links_in":[],"yoast_head":"\nIn Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods\" \/>\n<meta property=\"og:description\" content=\"McGuireWoods associate Nathanael Williams and partners David Hirsch, Andrew Konia and Todd Beaton authored an \u201cExpert Analysis\u201d column for Law360 on new guidance released by the New York Department of...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\" \/>\n<meta property=\"og:site_name\" content=\"McGuireWoods\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/mcguirewoods\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-12T20:03:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2024\/06\/MW-social-media-icon.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@McGuireWoodsLLP\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\"},\"author\":{\"name\":\"manger\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/e3cce53157a41dd55b6c1d02e0002300\"},\"headline\":\"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance\",\"datePublished\":\"2025-12-12T20:01:13+00:00\",\"dateModified\":\"2025-12-12T20:03:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\"},\"wordCount\":180,\"publisher\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\",\"url\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\",\"name\":\"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/#website\"},\"datePublished\":\"2025-12-12T20:01:13+00:00\",\"dateModified\":\"2025-12-12T20:03:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.mcguirewoods.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#website\",\"url\":\"https:\/\/www.mcguirewoods.com\/\",\"name\":\"McGuireWoods\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcguirewoods.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#organization\",\"name\":\"McGuireWoods\",\"url\":\"https:\/\/www.mcguirewoods.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2023\/06\/mcguirewoods-logo.svg\",\"contentUrl\":\"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2023\/06\/mcguirewoods-logo.svg\",\"width\":506,\"height\":80,\"caption\":\"McGuireWoods\"},\"image\":{\"@id\":\"https:\/\/www.mcguirewoods.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/mcguirewoods\",\"https:\/\/x.com\/McGuireWoodsLLP\",\"https:\/\/www.linkedin.com\/company\/mcguirewoods\",\"https:\/\/www.instagram.com\/mcguirewoods_llp\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/e3cce53157a41dd55b6c1d02e0002300\",\"name\":\"manger\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a317b96f8a2c97496ab042ad79fccf62e54ca2b53b229d13b1b84dda95de207e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a317b96f8a2c97496ab042ad79fccf62e54ca2b53b229d13b1b84dda95de207e?s=96&d=mm&r=g\",\"caption\":\"manger\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/","og_locale":"en_US","og_type":"article","og_title":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods","og_description":"McGuireWoods associate Nathanael Williams and partners David Hirsch, Andrew Konia and Todd Beaton authored an \u201cExpert Analysis\u201d column for Law360 on new guidance released by the New York Department of...","og_url":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/","og_site_name":"McGuireWoods","article_publisher":"https:\/\/www.facebook.com\/mcguirewoods","article_modified_time":"2025-12-12T20:03:05+00:00","og_image":[{"url":"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2024\/06\/MW-social-media-icon.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_site":"@McGuireWoodsLLP","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#article","isPartOf":{"@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/"},"author":{"name":"manger","@id":"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/e3cce53157a41dd55b6c1d02e0002300"},"headline":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance","datePublished":"2025-12-12T20:01:13+00:00","dateModified":"2025-12-12T20:03:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/"},"wordCount":180,"publisher":{"@id":"https:\/\/www.mcguirewoods.com\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/","url":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/","name":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance - McGuireWoods","isPartOf":{"@id":"https:\/\/www.mcguirewoods.com\/#website"},"datePublished":"2025-12-12T20:01:13+00:00","dateModified":"2025-12-12T20:03:05+00:00","breadcrumb":{"@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcguirewoods.com\/news\/in-the-news\/2025\/12\/in-law360-mcguirewoods-authors-analyze-nydfs-third-party-cybersecurity-guidance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mcguirewoods.com\/"},{"@type":"ListItem","position":2,"name":"In Law360, McGuireWoods Authors Analyze NYDFS Third-Party Cybersecurity Guidance"}]},{"@type":"WebSite","@id":"https:\/\/www.mcguirewoods.com\/#website","url":"https:\/\/www.mcguirewoods.com\/","name":"McGuireWoods","description":"","publisher":{"@id":"https:\/\/www.mcguirewoods.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcguirewoods.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcguirewoods.com\/#organization","name":"McGuireWoods","url":"https:\/\/www.mcguirewoods.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcguirewoods.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2023\/06\/mcguirewoods-logo.svg","contentUrl":"https:\/\/www.mcguirewoods.com\/wp-content\/uploads\/sites\/2\/2023\/06\/mcguirewoods-logo.svg","width":506,"height":80,"caption":"McGuireWoods"},"image":{"@id":"https:\/\/www.mcguirewoods.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/mcguirewoods","https:\/\/x.com\/McGuireWoodsLLP","https:\/\/www.linkedin.com\/company\/mcguirewoods","https:\/\/www.instagram.com\/mcguirewoods_llp"]},{"@type":"Person","@id":"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/e3cce53157a41dd55b6c1d02e0002300","name":"manger","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcguirewoods.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a317b96f8a2c97496ab042ad79fccf62e54ca2b53b229d13b1b84dda95de207e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a317b96f8a2c97496ab042ad79fccf62e54ca2b53b229d13b1b84dda95de207e?s=96&d=mm&r=g","caption":"manger"}}]}},"taxonomy_info":{"news_type":[{"value":2416,"label":"In The News"}],"practice_tax":[{"value":173,"label":"Data Privacy & Cybersecurity"}]},"featured_image_src_large":false,"author_info":{"display_name":"manger","author_link":"https:\/\/www.mcguirewoods.com\/author\/manger\/"},"comment_info":"","_links":{"self":[{"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/news\/98780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/news"}],"about":[{"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/types\/news"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/users\/4"}],"version-history":[{"count":3,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/news\/98780\/revisions"}],"predecessor-version":[{"id":98784,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/news\/98780\/revisions\/98784"}],"wp:attachment":[{"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/media?parent=98780"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/tags?post=98780"},{"taxonomy":"industry_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/industry_tax?post=98780"},{"taxonomy":"international_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/international_tax?post=98780"},{"taxonomy":"location_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/location_tax?post=98780"},{"taxonomy":"media_role","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/media_role?post=98780"},{"taxonomy":"news_type","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/news_type?post=98780"},{"taxonomy":"people_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/people_tax?post=98780"},{"taxonomy":"practice_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/practice_tax?post=98780"},{"taxonomy":"site_tax","embeddable":true,"href":"https:\/\/www.mcguirewoods.com\/wp-json\/wp\/v2\/site_tax?post=98780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}