EXECUTIVE CYBERSECURITY TRAINING · DORA
BlueTeamACADEMY
Start 30-day demo

LEADERSHIP PROGRAMME

NYDFS Cybersecurity Training for Executives and Senior Management

Risk-based cybersecurity awareness for financial-services leaders: social engineering, CISO reporting, nonpublic information and incident decisions.

New York Cybersecurity Regulation, 23 NYCRR Part 500, §500.14(a)(3)

BlueTeam Academy
6 modules · 12 assessment questionsApproximately 2 hoursNamed certificate of completion

WHO THIS IS FOR

Practical decisions in your regulatory context.

Executives and senior managers of NYDFS-covered entities, subject to their applicable Part 500 requirements and exemptions.

New York Cybersecurity Regulation, 23 NYCRR Part 500, §500.14(a)(3)

Section 500.14(a)(3) requires at least annual cybersecurity awareness training for all personnel, including social engineering, updated for the entity’s risk assessment. This leadership programme supports that wider obligation; it does not replace workforce training. Section 500.4(d) separately addresses senior governing-body oversight. Check applicable exemptions.

INSIDE THE COURSE

6 modules. Decisions you can practise.

Each module includes a practical role-specific scenario, a decision check and a written reflection. Complete the modules before taking the final scenario assessment.

  1. 01

    Part 500 scope and leadership responsibilities

    Connect personnel training and governing-body oversight to the entity’s applicable requirements.

    15 min
  2. 02

    Social engineering and executive impersonation

    Apply independent verification to payment, access and sensitive-data requests.

    15 min
  3. 03

    Risk assessment, investment and CISO challenge

    Evaluate CISO reporting and prioritise remediation using risk and supporting evidence.

    15 min
  4. 04

    Nonpublic information, access and providers

    Challenge access exceptions and supplier safeguards for information and systems.

    15 min
  5. 05

    Incident decisions and operational resilience

    Coordinate response, recovery and regulatory-notification assessment without waiting for certainty.

    15 min
  6. 06

    Annual learning and defensible evidence

    Build a risk-informed training cycle and distinguish course completion from regulatory certification.

    15 min
  7. ✓

    12 scenario questions · 80% pass mark

    Allow approximately 30 minutes for the final assessment and review.

LEARNING THAT LEAVES A RECORD

Practise, assess and document completion.

Apply the decisions

Work through role-relevant situations, explain your reasoning and connect the learning to your company’s procedures. Progress is saved as you complete each module.

Keep named evidence

After the module checks, written exercises and a passing assessment, receive a named certificate showing the course version and result. Administrators can export company completion reports and individual certificates.

Lessons and assessment are in English. Written responses are retained, not independently graded. Duration and the pass mark are Academy choices, not statutory thresholds. Completion is not accreditation or proof of organisational regulatory compliance.

Primary sources

Programme version: nydfs-executive-v2 · Content reviewed 14 October 2026