Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Jul 27, 2026 Vendor Management, Artificial Intelligence

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

So, your organization has decided to work with a new vendor that offers "AI-powered" or "AI-enabled" services. While some people may see dollar signs…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Jul 14, 2026 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance, Artificial Intelligence

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

The Cybersecurity and Infrastructure Security Agency (CISA), alongside international partners, has published a series of Artificial Intelligence (AI)…

Alyssa Pugh Published Date: Jun 17, 2026 Vendor Management, Business Continuity Planning, Credit Unions, Security and Compliance

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The…

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Alyssa Pugh

Savannah Richardson Published Date: May 14, 2026 Vendor Management, Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Federal banking regulators are increasingly approaching AI with cautious optimism. Here's what community banks and credit unions need to know in 2026.

Alyssa Pugh Published Date: Mar 19, 2026 Security and Compliance, Incident Management, Financial Institutions

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Alyssa Pugh Published Date: Mar 12, 2026 Security and Compliance

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Alyssa Pugh

Savannah Jones Published Date: Jan 02, 2026 Business Continuity Planning, Incident Management

Level Up Your Tabletop Exercises [Webinar Recap]

Tabletop exercises are a powerful tool for strengthening preparedness and resilience. When done well, they help validate plans, surface gaps, improve…

Alyssa Pugh Published Date: Dec 18, 2025 Cybersecurity Assessment Tool

Updated CISA Cybersecurity Performance Goals (CPGs)

The Cybersecurity and Infrastructure Security Agency (CISA) published version 2.0 of their Cross-Sector Cybersecurity Performance Goals (CPGs). Let's…

Alyssa Pugh Published Date: Nov 13, 2025

Securing Wearable Devices: New Technology, Same Old Risks

A customer recently asked how to manage the security risks posed by wearables, particularly in the context of visitors, and it's a great question.…

Alyssa Pugh Published Date: Sep 30, 2025 Credit Unions, Security and Compliance

NCUA Releases Updated ACET Application

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox…

Alyssa Pugh Published Date: Sep 23, 2025 Cybersecurity Assessment Tool, Security and Compliance

Texas SB 2610: What the New Law Means for Small Businesses

On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal…

Thanks for visiting our

Tandem Blog

Alyssa Pugh

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

Get our blog posts straight to your inbox.

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Level Up Your Tabletop Exercises [Webinar Recap]

Updated CISA Cybersecurity Performance Goals (CPGs)

Securing Wearable Devices: New Technology, Same Old Risks

NCUA Releases Updated ACET Application

Texas SB 2610: What the New Law Means for Small Businesses