Cybersecurity: Regulation S-P: You’re on notice

Try simply sending the vendor an email that states the vendor knows about the new notification requirements and revised Reg S-P