Information Security & Compliance Blog - Tandem

Alyssa Pugh

GRC Content Manager

Alyssa Pugh Published Date: Apr 08, 2021 Phishing

Phishing Spotlight: Tax Season Scams

In February 2021, the Internal Revenue Service (IRS) published an alert regarding a new tax phishing scam. According to the alert, the malicious…

Alyssa Pugh Published Date: Mar 30, 2021 Incident Management, Phishing

Incident Management: Seven Best Practices to Prepare for Security Incidents

According to the Tandem State of Cybersecurity 2020 Survey Report, the top three incidents experienced in 2019 by financial institutions were social…

Alyssa Pugh Published Date: Mar 18, 2021 Incident Management

The Six Phases of an Effective Incident Response Plan

Incident response planning can be risky business. It requires you to consider what could happen in the future, so you can best plan for it now.…

Alyssa Pugh Published Date: Mar 04, 2021 Vendor Management, Incident Management

Third-Party Incident Response Playbook

Organizations partner with third parties when the benefit to the organization is perceived to be greater than the risk of outsourcing. With access to…

Alyssa Pugh Published Date: Feb 23, 2021 Incident Management

7 Steps for Building a Successful Incident Response Team

When a potential incident occurs, it can be difficult to know who should be notified. Should the incident be reported to someone in IT, the…

Alyssa Pugh Published Date: Dec 15, 2020 Business Continuity Planning

Difference Between Business Continuity Management and Business Continuity Planning

We recently received a question from one of our Tandem Business Continuity Planning software users.

Alyssa Pugh Published Date: Nov 23, 2020 Risk Assessments, Business Continuity Planning, Security and Compliance, Financial Institutions

What is Business Continuity Planning?

What is Business Continuity Planning? In its simplest form, business continuity planning (sometimes referred to as business continuity management) is…

Alyssa Pugh Published Date: Nov 03, 2020 Business Continuity Planning, Financial Institutions

Business Hurricane Preparedness Checklist

If your organization operates in an area which could be affected by hurricanes, your Business Continuity Plan (BCP) should include steps to help your…

Alyssa Pugh Published Date: Oct 26, 2020 Security and Compliance, Financial Institutions, Phishing

Phishing Spotlight: COVID-19 SBA Scam

In August 2020, the US-CERT Cybersecurity & Infrastructure Security Agency published an alert regarding a malicious actor using COVID-19 as an…

Alyssa Pugh Published Date: Sep 05, 2020 Risk Assessments, Policy Management, Security and Compliance, Financial Institutions

5 IT Controls to Consider for Your Remote Work Environment

In the process of conducting a work from home risk assessment, once you have identified reasonably foreseeable threats to your organization and data,…

Alyssa Pugh Published Date: Sep 04, 2020 Risk Assessments, Security and Compliance, Financial Institutions

Developing Accurate Remote Work Risk Management Plans

Once you have identified reasonably foreseeable threats to your organization and data, and you have implemented controls to reduce the risk of those…