Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Nov 24, 2021 Incident Management, Banks

The New Incident Notification Rule: What Banks Need to Know

On November 18, 2021, the FDIC, OCC, and Federal Reserve published a final rule titled "Computer-Security Incident Notification Requirements for…

Alyssa Pugh Published Date: Nov 23, 2021 Risk Assessments, Policy Management, Credit Unions, Audit Management, Financial Institutions, Banks

What is an IT Audit Risk Assessment?

At Tandem, we occasionally receive questions from our clients on the topic of an "IT audit risk assessment," most often in reference to an…

Alyssa Pugh Published Date: Nov 11, 2021 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance

The Changing Definition of Risk

When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.

Alyssa Pugh Published Date: Oct 15, 2021 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

How Often Should You Complete the FFIEC Cybersecurity Assessment Tool?

IMPORTANT DISCLAIMER On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool…

Alyssa Pugh Published Date: Sep 14, 2021 Security and Compliance, Financial Institutions

FedLine Solutions Security and Resiliency Assurance Program

To promote the security of payment systems, the Federal Reserve has an initiative in place called the FedLine Solutions Security and Resiliency…

Alyssa Pugh Published Date: Sep 14, 2021 Risk Assessments, Incident Management, Phishing

Ransomware Incident Response Playbook

Organizations invest in technology because it improves efficiency, communications, data storage, and business growth opportunities. With increased…

Alyssa Pugh Published Date: Aug 12, 2021 Risk Assessments, Cybersecurity Assessment Tool

Integrating Cybersecurity and Enterprise Risk Management (ERM)

In October 2020, the National Institute of Standards and Technology (NIST) published NISTIR 8286 over Integrating Cybersecurity and Enterprise Risk…

Alyssa Pugh Published Date: Jul 29, 2021 Vendor Management

Proposed Vendor Management Guidance: What Banks Need to Know

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jul 08, 2021 Incident Management

How to Classify Security Incidents for Easier Response

When a security incident occurs, an early step in the analysis stage is to answer the question, "How bad is it?" Having an intentional approach to…

Alyssa Pugh Published Date: Jul 08, 2021 Vendor Management, Incident Management

Incident Response Plan Communication Guidelines

There is no question that when an incident occurs, there are a lot of people who may need to be notified, especially if you work for a financial…

Alyssa Pugh Published Date: Jul 08, 2021 Business Continuity Planning, Security and Compliance, Financial Institutions

FFIEC Releases New Architecture, Infrastructure, and Operations Booklet

On June 30, 2021, the Federal Financial Institutions Examination Council (FFIEC) released a new Architecture, Infrastructure, and Operations (AIO)…

Alyssa Pugh Published Date: May 14, 2021 Vendor Management, Risk Assessments, Business Continuity Planning, Cybersecurity Assessment Tool, Security and Compliance, Phishing

What Sets Tandem Apart?

At Tandem, we recognize there are a few GRC (governance, risk, and compliance) solutions on the market. So, why should you pick Tandem? Based on…

Thanks for visiting our

Tandem Blog