Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Jan 05, 2023 Policy Management, Security and Compliance

Policies vs. Standards vs. Controls vs. Procedures

At Tandem, we regularly receive the question, "What's the difference between policies, standards, controls, and procedures?" This question is…

Alyssa Pugh Published Date: Dec 13, 2022 Policy Management, Security and Compliance

Key Sections of an Information Security Policy

"If you don't know where you are going, any road will take you there." – The Cheshire Cat, Alice in Wonderland by Lewis Carroll

Alyssa Pugh Published Date: Nov 21, 2022 Financial Institutions, Phishing

5 Ways to Improve Your Phishing Test Results

It's no secret that phishing tests are a commonly used form of security awareness training. In fact, the 2022 Tandem State of Cybersecurity Report…

Alyssa Pugh Published Date: Nov 21, 2022 Policy Management

How to Conduct a Policy Review Meeting

Picture this: You have a big event coming up, like an audit, an exam, a board report, you get the idea. You know they are going to ask for your…

Alyssa Pugh Published Date: Oct 10, 2022 Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Banks

6 Tips for Writing an Effective Information Security Policy

If you asked a hundred Information Security Officers (ISOs) about their favorite part of the job, I would be willing to venture a guess that exactly…

Alyssa Pugh Published Date: Sep 23, 2022 Security and Compliance, Incident Management, Financial Institutions, Banks

How to Know if Your Bank Must Report a Cybersecurity Incident

Since the effective date for the incident notification rule for banks, we have received several questions asking about whether an incident would be…

Alyssa Pugh Published Date: Aug 29, 2022 Credit Unions, Incident Management, Financial Institutions, Banks

Your Financial Institution Incident Management Guidance Cheat Sheet

During the development of our Incident Management product, we spent a lot of time researching and reviewing guidance, so we could know exactly what…

Alyssa Pugh Published Date: Aug 16, 2022 Financial Institutions, Banks

FFIEC Rescinds the E-Banking Booklet

On May 13, 2022, the FFIEC published an entry to the IT Examination Handbook Infobase What's New page stating that they had rescinded the E-Banking…

Alyssa Pugh Published Date: Aug 01, 2022 Credit Unions, Financial Institutions, Banks

Difference Between Electronic Banking, Internet Banking, Mobile Banking, Open Banking, and Digital Banking

If you work in a financial institution, you may be familiar with using the terms "electronic banking," "internet banking," and "mobile banking"…

Alyssa Pugh Published Date: Jul 29, 2022 Credit Unions, Incident Management

The Proposed Cyber Incident Notification Requirements for Credit Unions

On July 21, 2022, the National Credit Union Administration (NCUA) published a new proposed rule titled "Cyber Incident Notification Requirements for…

Alyssa Pugh Published Date: Jul 18, 2022 Credit Unions, Incident Management, Financial Institutions, Banks

Security Incident Management Training: What Employees Need to Know

Every member of your staff is responsible for doing their part to help secure the organization from incidents, but do they know that? Employee…

Alyssa Pugh Published Date: Jul 07, 2022 Credit Unions, Financial Institutions

Credit Unions and Crypto: The NCUA’s Take on DLT and Digital Assets

As distributed ledger technology has evolved over the last few years, the National Credit Union Administration (NCUA) has stepped into the unknown…

Thanks for visiting our

Tandem Blog