Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Aug 22, 2025 Cybersecurity Assessment Tool, Security and Compliance

What is a Cybersecurity Control Self-Assessment?

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards.…

Alyssa Pugh Published Date: Aug 06, 2025 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions, Banks

Difference Between Risk Assessments and Cybersecurity Control Self-Assessments

"What is the difference between a risk assessment and a cybersecurity control self-assessment?"

Alyssa Pugh Published Date: Jul 11, 2025 Incident Management

Updated NIST Incident Response Guidance: SP 800-61 Rev. 3

On April 3, 2025, the National Institute of Standards and Technology (NIST) released SP 800-61 Rev. 3, a new guide covering Incident Response…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

Building a Data Compliance Program for the DOJ’s New Security Rule with Tandem

The Department of Justice recently finalized a new rule on Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

What the DOJ’s New Security Rule Means for Financial Institutions

On April 8, 2025, a final rule from the Department of Justice (DOJ) went into effect on Preventing Access to U.S. Sensitive Personal Data and…

Alyssa Pugh Published Date: Apr 30, 2025 Policy Management

How Soon Should Vulnerabilities Be Patched?

If you've worked in security for more than a minute, you know vulnerability and patch management are important.

Alyssa Pugh Published Date: Apr 22, 2025 Vendor Management, Risk Assessments, Policy Management

Riding into the Sunset: A Community Financial Institution’s Guide to IT Asset End-of-Life

Everyone loves a good sunset……. when it's out in nature. 🌄

Alyssa Pugh Published Date: Mar 24, 2025 Business Continuity Planning, Incident Management

How to Conduct an Effective Tabletop Exercise

Special thanks to Tandem Partner, Boost Consulting, for their contributions to this article. Boost Consulting specializes in providing information…

Alyssa Pugh Published Date: Jan 21, 2025 Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)?

Artificial Intelligence (AI) has transformed industries, boosting efficiency while simultaneously presenting substantial risks—a true double-edged…

Alyssa Pugh Published Date: Dec 18, 2024 Business Continuity Planning, Credit Unions

An Overview of the New Credit Union Succession Planning Rule

On December 17, 2024, the NCUA Board approved a final rule on the topic of Succession Planning. The rule goes into effect on January 1, 2026. In this…

Alyssa Pugh Published Date: Dec 03, 2024 Vendor Management

Model Risk Management FAQs for Community Banks & Credit Unions

Model risk management is an evolving topic for community banks and credit unions. While models have been around for a long time, their prevalence in…

Alyssa Pugh Published Date: Oct 08, 2024 Cybersecurity Assessment Tool

What Framework Do I Replace the FFIEC CAT With?

On August 29, 2024, the FFIEC announced they would be sunsetting the Cybersecurity Assessment Tool (CAT) effective August 31, 2025. For the last ten…

Thanks for visiting our

Tandem Blog