NYSERDA committee recommends updates to Internal Control Manual, cites AI and cybersecurity among risks

Pam Poisson, the Authority’s Chief Financial Officer, presented the Committee with a risk assessment update and proposed amendments to the Internal Control Manual (ICM). Poisson said the "proposed updates incorporate the Authority’s updated mission, vision and promise; highlight its leadership role on the State Energy Planning Board and acknowledge the evolution of the energy landscape; clarify the scope of our monitoring of federal and state legislative and regulatory actions to stay well prepared and aligned with New York State direction; and add reference to key policy and practice updates addressing Artificial Intelligence ("AI") and other emerging technology threats and opportunities."

Poisson described substantive progress on risks identified in the Authority's most recent risk and controls self‑assessment (RCSA), including better process definition, staff training, and technology updates to enable faster, more streamlined controls and improved business intelligence. She also confirmed that the proposed ICM updates would enable a more systematic internal audit process and that the Internal Audit Plan for the coming fiscal year will be informed by the upcoming RCSA. The Committee adopted Resolution No. 521 by unanimous voice vote, recommending Board approval of the ICM amendments with non‑substantive editorial discretion granted to the President and CEO.

The presentation noted that the proposed budget supports necessary upgrades to keep controls robust amid a dynamic threat environment, and that the Authority’s Information Security team and Data Governance Counsel are providing ongoing guardrails. The recommendation goes to the Board for final action.