NYDFS Releases Cyber Guidance Covering Vendors, AI, Quantum
NYDFS instructs banks to tighten vendor and AI cyber risk controls.
The New York State Department of Financial Services (NYDFS) has issued new cyber risk guidance that expands its framework to cover shared vendors, artificial intelligence, and quantum computing technologies. The memo, reported by Sheppard Mullin, signals a shift in regulator expectations for NY-based banks and insurers. NYDFS urges firms to reassess vendor oversight, map AI tools to risk categories, and evaluate quantum-safe infrastructure. Clients may need new due-diligence reviews of third-party providers, AI-specific controls, and quantum-resilience policies. Policies should be updated before NYDFS compatibility assessments later this year. This guidance underscores regulatory pressure to strengthen technology oversight; firms should benchmark current practices against NYDFS criteria to avoid non-compliance. This summary is based on early reports and is subject to confirmation by official NYDFS statements.