Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Jun 28, 2022 Credit Unions, Financial Institutions, Banks

An Overview of the FTC Safeguards Rule

On December 9, 2021, the Federal Trade Commission (FTC) published their revised Standards for Safeguarding Customer Information (16 CFR Part 314) in…

Alyssa Pugh Published Date: Jun 13, 2022 Credit Unions Phishing Financial Institutions

NCUA Alerts Credit Unions on Heightened Risk of Phishing

At the end of March 2022, the NCUA published a new risk alert titled Heightened Risk of Social Engineering and Phishing Attacks. Citing the ongoing…

Alyssa Pugh Published Date: May 10, 2022 featured, Credit Unions Banks Financial Institutions Vendor

Creative Vendor Management: Managing FinTech Relationships

On August 27, 2021, the Federal Deposit Insurance Corporation (FDIC), the Board of Governors of the Federal Reserve System (FRB), and the Office of…

Alyssa Pugh Published Date: Apr 27, 2022 Risk Assessments, Credit Unions, Financial Institutions, Banks

What is a GLBA Risk Assessment?

In a recent Tandem "Ask Me Anything" webinar on risk assessments, one of the attendees asked, "What is a GLBA risk assessment?" This is a great…

Alyssa Pugh Published Date: Apr 08, 2022 Policy Management, Credit Unions, Incident Management, Financial Institutions, Banks

New Cyber Incident Reporting Act

Before You Read: This blog is about the original Cyber Incident Reporting Act and may contain outdated information. For an updated overview of the…

Alyssa Pugh Published Date: Mar 15, 2022 Career, Credit Unions, Financial Institutions, Banks

What to Do if Your ISO Leaves

Finding the right person to be your information security officer (ISO) can be a challenge. The person filling this role often wears many hats, most…

Alyssa Pugh Published Date: Mar 03, 2022 Credit Unions, Security and Compliance, Financial Institutions, Banks

4 Things to Consider Before Hiring a vISO

Working in cybersecurity can be exhausting. Not only must Information Security Officers (ISOs) be well-versed in the ever-changing world of…

Alyssa Pugh Published Date: Feb 04, 2022 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Audit Management, Incident Management, Banks

Why CISA Wants You to “Implement Cybersecurity Measures Now”

On January 18, 2022, the Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) released a new "Insights" memo with…

Alyssa Pugh Published Date: Jan 04, 2022 Vendor Management, Risk Assessments, Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Phishing, Banks

What is Multifactor Authentication?

In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication…

Alyssa Pugh Published Date: Dec 08, 2021 Credit Unions, Incident Management, Financial Institutions, Banks

5 Benefits of an Incident Tracking System

In January 2021, we asked a group of 175 financial institution cybersecurity professionals if their organization had a formal incident tracking…

Alyssa Pugh Published Date: Nov 24, 2021 Incident Management, Banks

The New Incident Notification Rule: What Banks Need to Know

On November 18, 2021, the FDIC, OCC, and Federal Reserve published a final rule titled "Computer-Security Incident Notification Requirements for…

Alyssa Pugh Published Date: Nov 23, 2021 Risk Assessments, Policy Management, Credit Unions, Audit Management, Financial Institutions, Banks

What is an IT Audit Risk Assessment?

At Tandem, we occasionally receive questions from our clients on the topic of an "IT audit risk assessment," most often in reference to an…

Thanks for visiting our

Tandem Blog