Tandem Blog

How can we be prepared for deepfake attacks that look and sound real? In this article, we’ll explore how to train employees to recognize deepfakes quickly, verify unexpected requests, and report suspicious activity before it leads to serious damage.

What counts as an information asset? How do you evaluate risk at the information asset level? If you’ve asked any of those questions, this guide walks you through an asset-based risk assessment approach.

The Cybersecurity and Infrastructure Security Agency (CISA) published version 2.0 of their Cross-Sector Cybersecurity Performance Goals (CPGs). Let’s take a look at the CPGs and what changed in this latest version.

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox (ACET). Here’s an overview of what’s new.

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards. But what does that mean exactly?

We polled over 200 information security professionals, primarily at financial institutions, on how they are implementing polices and training on AI in the workplace.