Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Oct 21, 2026 Vendor Management, Risk Assessments, Financial Institutions

New Federal Reserve Proposed TPRM Guide for Community Banks

On September 15, 2026, the Federal Reserve published a Proposed Third-Party Risk Management Guide for Traditional Community Banking Organizations…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Oct 07, 2026 Vendor Management, Risk Assessments, Financial Institutions

New Proposed Third-Party Risk Management (TPRM) Guidance | September 2026 Update

On September 15, 2026, the OCC, FRB, FDIC, and NCUA jointly published Proposed Third-Party Risk Management Guidance in the Federal Register. If…

Alyssa Pugh Published Date: Sep 01, 2026 Cybersecurity Assessment Tool, Financial Institutions

How to Report Cybersecurity Assessment Results to Your Board of Directors

People are creatures of habit. We notice when the coffee cup is on the wrong shelf, the chair has moved a foot, or the website menu has been…

Alyssa Pugh Published Date: Jul 27, 2026 Vendor Management, Artificial Intelligence

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jul 14, 2026 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance, Artificial Intelligence

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

The Cybersecurity and Infrastructure Security Agency (CISA), alongside international partners, has published a series of Artificial Intelligence (AI)…

Alyssa Pugh Published Date: Jun 17, 2026 Vendor Management, Business Continuity Planning, Credit Unions, Security and Compliance

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The…

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Alyssa Pugh

Savannah Richardson Published Date: May 14, 2026 Vendor Management, Artificial Intelligence

Thanks for visiting our

Tandem Blog

Alyssa Pugh

New Federal Reserve Proposed TPRM Guide for Community Banks

Get our blog posts straight to your inbox.

New Proposed Third-Party Risk Management (TPRM) Guidance | September 2026 Update

How to Report Cybersecurity Assessment Results to Your Board of Directors

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Level Up Your Tabletop Exercises [Webinar Recap]

Updated CISA Cybersecurity Performance Goals (CPGs)