“Every agency should have a regular cyber risk assessment that really understands what are my risks today and not just directly, but through my vendors and my internal systems.”

“The AI office can request, as it was said, the information and model access, conduct evaluations that require measures concerning the general purpose AI providers that have systemic risk.”

“I report into the chief operating officer... and also into the head of cyber underwriting... I use my cybersecurity knowledge to help them improve how we assess individual risks and map threat intelligence to portfolio scenarios.”

“We have to have an annual independent risk assessment, validating the security.”

“You have a vendor program that works in partnership with departments, legal, risk, information technology, your financial systems, that communication really provides a platform for governance”