The New York Fed has published a summary of an event held earlier in the year which looked at the potential impacts of cyber risks on financial stability.
The event, the sixth annual State-of-the-Field Conference on Cyber Risk to Financial Stability, was co-organized by the New York Fed and Columbia University’s School of International and Public Affairs.
Key points from the summary include:
- Systemic risk is amplified by growing technological interconnectivity: failures in one system can cascade across networks. The CrowdStrike incident was cited to illustrate heightened concentration risk from reliance on third- and nth-party providers.
- Software vulnerabilities remain a primary driver of cyber risk. However, AI could help by detecting zero-day vulnerabilities in widely used open-source software, although safeguards are needed.
- The role of trust in AI use was flagged as critical: misinformation, bias, deepfakes, and social impacts pose threats that financial firms must manage proactively.
- As well as changing the threat landscape, Generative AI holds transformative potential, including helping regulators perform real-time cyber risk assessments.
- Despite AI’s benefits, panellists emphasized that human oversight is essential, particularly ensuring that AI is trained on quality data, robust risk management is in place, and caution is exercised regarding third-party and supply chain use.
- The cloud environment poses additional challenges, requiring multidimensional protection strategies, especially for critical infrastructure where geopolitical tensions may exacerbate risks.
