Has the New York FS regulator set the benchmark for cyber regulation and will other US states follow?