NYDFS Part 500 and the AI Cybersecurity Letter: What New York-Regulated Institutions Have to Build
New York's Part 500 is fully phased in and its October 2024 AI guidance tells covered entities how to apply it to AI risk. The controls that matter for an AI agent: phishing-resistant authentication, privileged access on the model store, AI vendor diligence, and data minimization.