Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Nov 11, 2021 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance

The Changing Definition of Risk

When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.

Alyssa Pugh Published Date: Oct 15, 2021 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

How Often Should You Complete the FFIEC Cybersecurity Assessment Tool?

IMPORTANT DISCLAIMER On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool…

Alyssa Pugh Published Date: Sep 14, 2021 Security and Compliance, Financial Institutions

FedLine Solutions Security and Resiliency Assurance Program

To promote the security of payment systems, the Federal Reserve has an initiative in place called the FedLine Solutions Security and Resiliency…

Alyssa Pugh Published Date: Sep 14, 2021 Risk Assessments, Incident Management, Phishing

Ransomware Incident Response Playbook

Organizations invest in technology because it improves efficiency, communications, data storage, and business growth opportunities. With increased…

Alyssa Pugh Published Date: Aug 12, 2021 Risk Assessments, Cybersecurity Assessment Tool

Integrating Cybersecurity and Enterprise Risk Management (ERM)

In October 2020, the National Institute of Standards and Technology (NIST) published NISTIR 8286 over Integrating Cybersecurity and Enterprise Risk…

Alyssa Pugh Published Date: Jul 29, 2021 Vendor Management

Proposed Vendor Management Guidance: What Banks Need to Know

On July 19, 2021, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC)…

Alyssa Pugh Published Date: Jul 08, 2021 Incident Management

How to Classify Security Incidents for Easier Response

When a security incident occurs, an early step in the analysis stage is to answer the question, "How bad is it?" Having an intentional approach to…

Alyssa Pugh Published Date: Jul 08, 2021 Vendor Management, Incident Management

Incident Response Plan Communication Guidelines

There is no question that when an incident occurs, there are a lot of people who may need to be notified, especially if you work for a financial…

Alyssa Pugh Published Date: Jul 08, 2021 Business Continuity Planning, Security and Compliance, Financial Institutions

FFIEC Releases New Architecture, Infrastructure, and Operations Booklet

On June 30, 2021, the Federal Financial Institutions Examination Council (FFIEC) released a new Architecture, Infrastructure, and Operations (AIO)…

Alyssa Pugh Published Date: May 14, 2021 Vendor Management, Risk Assessments, Business Continuity Planning, Cybersecurity Assessment Tool, Security and Compliance, Phishing