Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Jan 29, 2024 Security and Compliance, Audit Management, Financial Institutions

FDIC Releases Updated InTREx Procedures

On September 29, 2023, the Federal Deposit Insurance Corporation (FDIC) published FIL-52-2023 announcing the updated Information Technology Risk…

Alyssa Pugh

Savannah Richardson Published Date: Oct 31, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Security and Compliance, Incident Management, Financial Institutions, Phishing, Banks

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an…

Alyssa Pugh Published Date: Oct 02, 2023 Audit Management

How to Respond to an Audit or Exam Finding

While findings may be a normal part of an audit or examination, that doesn't make them any less daunting to navigate. Sometimes findings catch us…

Alyssa Pugh Published Date: Sep 18, 2023 Policy Management

What Not to Write: 5 Common Policy Writing Mistakes

In the early 2000's, there was a reality TV show on TLC called "What Not to Wear." The show's premise involved giving poorly dressed individuals a…

Alyssa Pugh Published Date: Sep 05, 2023 Vendor Management

The Vendor Manager’s Guide to Subcontractor Risk Management

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jul 20, 2023 Cybersecurity Assessment Tool, Credit Unions

A Complete History of the FFIEC CAT

The FFIEC Cybersecurity Assessment Tool (CAT) has a rich history. The purpose of this article is to provide a comprehensive timeline of the FFIEC CAT…

Alyssa Pugh Published Date: Jul 10, 2023 Incident Management, Financial Institutions

The OCC’s Cybersecurity Supervision Work Program (CSW) [October 2026 Update]

On September 21, 2026, the Office of the Comptroller of the Currency (OCC) published Bulletin 2026-48, updating its Cybersecurity Supervision Work…

Alyssa Pugh Published Date: Jun 15, 2023 Policy Management, Credit Unions, Incident Management

Reportable Cyber Incidents: An Overview of the NCUA’s New Notification Rule

Note: This article was updated on January 13, 2025. See the update log at the bottom of the article.

Alyssa Pugh Published Date: Jun 08, 2023 Vendor Management, Risk Assessments, Banks

New Third-Party Risk Management Guidance: What Community Banks Need to Know

On June 6, 2023, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC)…

Alyssa Pugh Published Date: Jun 01, 2023 Business Continuity Planning

Top BCP Software Features to Consider Before You Buy

Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a…

Alyssa Pugh Published Date: May 04, 2023 Business Continuity Planning, Policy Management, Incident Management, Mortgage Companies

An Overview of Freddie Mac’s Updated Information Security Requirements

On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie…

Alyssa Pugh Published Date: Mar 28, 2023 Financial Institutions

Financial Institutions & Quantum Computing: A Cybersecurity Compliance Timeline

"Quantum computing" started as a theory decades ago. Today it is becoming a reality with companies like IBM launching powerful quantum computers and…

Thanks for visiting our

Tandem Blog

Alyssa Pugh

FDIC Releases Updated InTREx Procedures

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

How to Respond to an Audit or Exam Finding

What Not to Write: 5 Common Policy Writing Mistakes

The Vendor Manager’s Guide to Subcontractor Risk Management

A Complete History of the FFIEC CAT

The OCC’s Cybersecurity Supervision Work Program (CSW) [October 2026 Update]

Reportable Cyber Incidents: An Overview of the NCUA’s New Notification Rule

New Third-Party Risk Management Guidance: What Community Banks Need to Know

Top BCP Software Features to Consider Before You Buy

An Overview of Freddie Mac’s Updated Information Security Requirements

Financial Institutions & Quantum Computing: A Cybersecurity Compliance Timeline