Level Up Your Tabletop Exercises [Webinar Recap]
In our recent webinar, Level Up Your Tabletop Exercises, GRC Content Manager Alyssa Pugh walked through practical, experience-based guidance for making tabletops more effective and more valuable.
Thanks for visiting our
Tandem Blog
Get our blog posts straight to your inbox.
You have been successfully subscribed to our newsletter.
Updated CISA Cybersecurity Performance Goals (CPGs)
The Cybersecurity and Infrastructure Security Agency (CISA) published version 2.0 of their Cross-Sector Cybersecurity Performance Goals (CPGs). Let’s take a look at the CPGs and what changed in this latest version.
Securing Wearable Devices: New Technology, Same Old Risks
Published Date:
Smart glasses are being marketed as the next big leap in technology. They are powerful, but also risky when it comes to information security. So, how can you control the risk of wearables?
NCUA Releases Updated ACET Application
On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox (ACET). Here’s an overview of what’s new.
Texas SB 2610: What the New Law Means for Small Businesses
On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal “safe harbor” for those that proactively adopt strong cybersecurity practices. Here’s what you need to know.
What is a Cybersecurity Control Self-Assessment?
A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards. But what does that mean exactly?
Difference Between Risk Assessments and Cybersecurity Control Self-Assessments
Published Date:
Learn the complementary, but distinct differences between a risk assessment and a cybersecurity assessment, and how they both contribute to understanding an organization’s security posture.
How Financial Institutions Are Preparing for AI with Policies and Training
We polled over 200 information security professionals, primarily at financial institutions, on how they are implementing polices and training on AI in the workplace.
Updated NIST Incident Response Guidance: SP 800-61 Rev. 3
On April 3, 2025, NIST released a new guide covering Incident Response Recommendations and Considerations for Cybersecurity Risk Management. Let’s dive into what’s new and what it means for your incident response plans.
Frequently Asked Questions about the NIST Cybersecurity Framework (CSF)
The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations assess their cyber readiness. You might find yourself asking questions like "Where do I start?" This blog is here to walk you through those common questions.
What Financial Institutions Say They Are Using to Replace the FFIEC CAT
With the FFIEC retiring the CAT, we surveyed 400+ financial institutions to reveal how they plan to transition and which cybersecurity frameworks they prefer next.