Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Dec 03, 2024 Vendor Management

Model Risk Management FAQs for Community Banks & Credit Unions

Model risk management is an evolving topic for community banks and credit unions. While models have been around for a long time, their prevalence in…

Alyssa Pugh Published Date: Oct 08, 2024 Cybersecurity Assessment Tool

What Framework Do I Replace the FFIEC CAT With?

On August 29, 2024, the FFIEC announced they would be sunsetting the Cybersecurity Assessment Tool (CAT) effective August 31, 2025. For the last ten…

Alyssa Pugh Published Date: Sep 04, 2024

An Overview of the FFIEC’s Development, Acquisition, and Maintenance Booklet

On August 29, 2024, the Federal Financial Institutions Examination Council (FFIEC) released a new Development, Acquisition, and Maintenance (DA&M)…

Alyssa Pugh Published Date: Aug 08, 2024 Vendor Management

A Vendor Manager’s Guide to Service Level Agreements (SLAs)

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jul 30, 2024 Vendor Management, Incident Management

Regulation S-P: An Overview of the SEC’s Latest Cybersecurity Amendments

On June 3, 2024, the Securities and Exchange Commission (SEC) published a final rule titled Regulation S-P: Privacy of Consumer Financial Information…

Alyssa Pugh Published Date: Jul 24, 2024 Risk Assessments

Growing Cybersecurity: A Look at the FCA’s New Cyber Risk Management Rule

The Farm Credit Administration (FCA) final rule goes into effect on January 1, 2025. If you work for a farm credit institution, what does the final…

Alyssa Pugh Published Date: Jul 16, 2024 Business Continuity Planning, Incident Management

BCP and IRP Exercises & Tests: Frequently Asked Questions

Businesses are expected to put their business continuity and incident response plans to the test. But what does that mean exactly? If the whole…

Alyssa Pugh Published Date: Jun 17, 2024 Vendor Management

The New Third-Party Risk Management Guide for Community Banks

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: May 06, 2024 Security and Compliance, Financial Institutions

GLBA Compliance: The Legislation, the Standards, and the Guidance

If you work for a financial institution, you may have heard the term GLBA once or twice. Or a lot. In our experience, people often use the term GLBA…

Alyssa Pugh Published Date: Apr 15, 2024 Security and Compliance, Incident Management, Financial Institutions

A Financial Institution’s Guide to CISA’s Proposed CIRCIA Reporting Requirements

On April 4, 2024, CISA published a proposed rule in the Federal Register titled Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)…

Alyssa Pugh Published Date: Mar 05, 2024 Vendor Management, Security and Compliance, Financial Institutions

6 Key Updates in the NIST Cybersecurity Framework (CSF) 2.0

On February 26, 2024, the National Institute of Standards and Technology (NIST) published an update to their Cybersecurity Framework (CSF). A decade…

Alyssa Pugh Published Date: Jan 29, 2024 Security and Compliance, Audit Management, Financial Institutions

FDIC Releases Updated InTREx Procedures

On September 29, 2023, the Federal Deposit Insurance Corporation (FDIC) published FIL-52-2023 announcing the updated Information Technology Risk…

Thanks for visiting our

Tandem Blog