Information Security & Compliance Blog

Savannah Richardson

Elizabeth Weathers Published Date: Sep 03, 2026 featured, Artificial Intelligence

Report on Deepfake Risk in Financial Institutions

Executive Summary Deepfake and AI-driven impersonation threats are rapidly emerging as a top concern for financial institutions. During a recent…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Sep 01, 2026 Cybersecurity Assessment Tool, Financial Institutions

How to Report Cybersecurity Assessment Results to Your Board of Directors

People are creatures of habit. We notice when the coffee cup is on the wrong shelf, the chair has moved a foot, or the website menu has been…

Alyssa Pugh Published Date: Jul 27, 2026 Vendor Management, Artificial Intelligence

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

So, your organization has decided to work with a new vendor that offers "AI-powered" or "AI-enabled" services. While some people may see dollar signs…

Alyssa Pugh Published Date: Jul 14, 2026 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance, Artificial Intelligence

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

The Cybersecurity and Infrastructure Security Agency (CISA), alongside international partners, has published a series of Artificial Intelligence (AI)…

Alyssa Pugh Published Date: Jun 17, 2026 Vendor Management, Business Continuity Planning, Credit Unions, Security and Compliance

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The…

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Savannah Richardson Published Date: May 19, 2026 Vendor Management, Credit Unions, Security and Compliance, Financial Institutions, Banks, Artificial Intelligence

Vibe Coding and AI Citizen Developers: Risk Management Tips for Banks and Credit Unions

Alyssa Pugh

Savannah Richardson Published Date: May 14, 2026 Vendor Management, Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Federal banking regulators are increasingly approaching AI with cautious optimism. Here's what community banks and credit unions need to know in 2026.

Alyssa Pugh Published Date: Mar 19, 2026 Security and Compliance, Incident Management, Financial Institutions

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Alyssa Pugh Published Date: Mar 12, 2026 Security and Compliance

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Savannah Richardson

Elizabeth Weathers Published Date: Feb 05, 2026 featured, Business Continuity Planning, Incident Management, Artificial Intelligence

Can You Spot a Deepfake? What Every Employee Should Know

Deepfakes are quickly becoming one of the most dangerous tools in modern social engineering. With accessible AI tools, anyone can easily generate…

Savannah Richardson Published Date: Jan 26, 2026 Risk Assessments, Security and Compliance

How to Perform an Information Asset-Based Risk Assessment

Risk assessments are a required part of a financial institution's Information Security Program, but understanding how to perform one based on…

Thanks for visiting our

Tandem Blog