Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Sep 30, 2025 Credit Unions, Security and Compliance

NCUA Releases Updated ACET Application

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox…

Alyssa Pugh Published Date: Sep 23, 2025 Cybersecurity Assessment Tool, Security and Compliance

Texas SB 2610: What the New Law Means for Small Businesses

On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal…

Alyssa Pugh Published Date: Aug 22, 2025 Cybersecurity Assessment Tool, Security and Compliance

What is a Cybersecurity Control Self-Assessment?

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards.…

Alyssa Pugh Published Date: Aug 06, 2025 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions, Banks

Difference Between Risk Assessments and Cybersecurity Control Self-Assessments

"What is the difference between a risk assessment and a cybersecurity control self-assessment?"

Alyssa Pugh Published Date: Jul 11, 2025 Incident Management

Updated NIST Incident Response Guidance: SP 800-61 Rev. 3

On April 3, 2025, the National Institute of Standards and Technology (NIST) released SP 800-61 Rev. 3, a new guide covering Incident Response…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

Building a Data Compliance Program for the DOJ’s New Security Rule with Tandem

The Department of Justice recently finalized a new rule on Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

What the DOJ’s New Security Rule Means for Financial Institutions

On April 8, 2025, a final rule from the Department of Justice (DOJ) went into effect on Preventing Access to U.S. Sensitive Personal Data and…

Alyssa Pugh Published Date: Apr 30, 2025 Policy Management

How Soon Should Vulnerabilities Be Patched?

If you've worked in security for more than a minute, you know vulnerability and patch management are important.

Alyssa Pugh Published Date: Apr 22, 2025 Vendor Management, Risk Assessments, Policy Management

Riding into the Sunset: A Community Financial Institution’s Guide to IT Asset End-of-Life

Everyone loves a good sunset……. when it's out in nature. 🌄

Alyssa Pugh Published Date: Mar 24, 2025 Business Continuity Planning, Incident Management

How to Conduct an Effective Tabletop Exercise

Special thanks to Tandem Partner, Boost Consulting, for their contributions to this article. Boost Consulting specializes in providing information…

Alyssa Pugh Published Date: Jan 21, 2025 Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)?

Artificial Intelligence (AI) has transformed industries, boosting efficiency while simultaneously presenting substantial risks—a true double-edged…

Alyssa Pugh Published Date: Dec 18, 2024 Business Continuity Planning, Credit Unions

An Overview of the New Credit Union Succession Planning Rule

On December 17, 2024, the NCUA Board approved a final rule on the topic of Succession Planning. The rule goes into effect on January 1, 2026. In this…

Thanks for visiting our

Tandem Blog