On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal “safe harbor” for those that proactively adopt strong cybersecurity practices. Here’s what you need to know.
A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards. But what does that mean exactly?
Learn the complementary, but distinct differences between a risk assessment and a cybersecurity assessment, and how they both contribute to understanding an organization’s security posture.
We polled over 200 information security professionals, primarily at financial institutions, on how they are implementing polices and training on AI in the workplace.
On April 3, 2025, NIST released a new guide covering Incident Response Recommendations and Considerations for Cybersecurity Risk Management. Let’s dive into what’s new and what it means for your incident response plans.
The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations assess their cyber readiness. You might find yourself asking questions like "Where do I start?" This blog is here to walk you through those common questions.
With the FFIEC retiring the CAT, we surveyed 400+ financial institutions to reveal how they plan to transition and which cybersecurity frameworks they prefer next.
On April 8, 2025, a final rule from the DOJ went into effect on the security of personal and government related data. While this rule applies broadly, let's take a look at the terms and requirements as they relate to financial institutions.
The Department of Justice recently finalized a new rule requiring anyone who is performing "restricted transactions" to implement a Data Compliance Program by October 6, 2025. Let's take a look at how you can build this Data Compliance Program with Tandem.
Vulnerability and patch management are essential for maintaining security-leaving vulnerabilities unaddressed is like leaving your front door wide open. But how quickly must you patch to remain secure and compliant? Let's break it down.
When IT assets hit their sunset phase, most people would rather be anywhere else. But if you work for a financial institution, managing IT asset end-of-life (EOL) isn’t just a good idea; it’s a requirement.
How can you handle EOL without the stress? Let’s take a look.
