Announcing New York State Department of Financial Services Attestation

Sumo Logic is excited to announce that it has achieved the New York State Department of Financial Services Attestation to support our customers’ abilities to meet privacy and security requirements for critical data. The Sumo Logic platform itself not only meets the intent of the requirements, but also can be configured to help Financial Institutions meet the requirements of NYDFS. The NYDFS attestation is quickly becoming the gold standard for safely moving financial data to the cloud. Our NYDFS Attestation allows product teams to build trust in their customers by adhering to the regulation.

The New York State Department of Financial Services (DFS or NYSDFS) is the department of the New York state government responsible for regulating financial services and products, including those subject to the New York insurance, banking and financial services laws. The department is designed to modernize regulation by allowing the agency to oversee a broad array of financial products and services. NYDFS defines regulatory cybersecurity requirements for financial services providers (Banks, Securities Dealers, Insurance Companies).

Many of our customers commonly request this attestation, especially in light of the fact that FinTech companies are accelerating their digital transformation and cloud journey. We are now well-positioned to not only ingest relevant data with a high level of trust but also help organizations to meet critical regulatory requirements.

The NYDFS Attestation is available on the Sumo Logic Self Service Portal. The information is included in the attestation in the form of a white paper, along with a detailed control mapping to align with specific use case requirements.

All too often, we see customers facing an audit process that is more painful and time consuming than it needs to be. With the Sumo Logic platform, real-time compliance dashboards reduce the time spent on audit walkthroughs and measuring control effectiveness by easily sharing them with internal and external auditors. Additionally, the Sumo Logic platform can be configured to help financial institutions comply with NYDFS requirements as part of evolving cloud strategies.

“Although Sumo Logic as a company is not required to comply with NYDFS, our service offering meets the intent of the requirements. Additionally, the Sumo Logic platform can be easily configured to help Financial Institutions meet the requirements of NYDFS,” says George Gerchow, Chief Security Officer of Sumo Logic, adding that “this is just another step in providing seamless security and compliance to our customers as part of our Continuous Intelligence Platform.”

Security is in our DNA

Sumo Logic security applies best-in-class technologies and a rigorous process to put the safety of your data first.

World-class security organization

Founded by IT Security veterans with 100+ years of experience. CSO and a dedicated SOC team focused on ensuring platform and data security.

Best-in class DevSecOps

Robust platform that integrates security principles into the development process from the get-go.

Security-by-design platform

Shared responsibility model where we provide third party certifications validating our InfoSec policies and practices, along with customer controls so that you can directly manage your use case needs.

Sumo Logic’s compliance reports, attestations, and certifications speak to organizational commitment to data security. Sumo Logic currently holds the following for its core Continuous Intelligence Platform (CIP) and Cloud SIEM Enterprise (CSE) One Platform offering: NYDFS Attestation, SOC 2 Type 2 Audit Report, HIPAA Security Rule and Breach Notification Rule Attestation, PCI DSS 3.2.1. Service Provider Level 1 Certification, ISO 27001 Certification, CSA STAR Certification, and a FedRAMP-Moderate Authorization for the Federal product on the Continuous Intelligence Platform.