Information Security & Compliance Blog - Tandem

Savannah Richardson

GRC Content Analyst

Savannah Richardson Published Date: Oct 22, 2026 Vendor Management, Risk Assessments, Financial Institutions, Artificial Intelligence

CSBS AI Supervisory Framework: A Guide for Financial Institutions

Artificial Intelligence (AI) is already present in many financial institutions. Sometimes it is through tools employees use directly, such as ChatGPT…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Savannah Richardson

Elizabeth Weathers Published Date: Sep 03, 2026 Featured, Artificial Intelligence

Report on Deepfake Risk in Financial Institutions

Executive Summary Deepfake and AI-driven impersonation threats are rapidly emerging as a top concern for financial institutions. During a recent…

Savannah Richardson Published Date: May 19, 2026 Vendor Management, Credit Unions, Security and Compliance, Financial Institutions, Banks, Artificial Intelligence

Vibe Coding and AI Citizen Developers: Risk Management Tips for Banks and Credit Unions

Alyssa Pugh

Savannah Richardson Published Date: May 14, 2026 Vendor Management, Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Federal banking regulators are increasingly approaching AI with cautious optimism. Here's what community banks and credit unions need to know in 2026.

Savannah Richardson

Elizabeth Weathers Published Date: Feb 05, 2026 Featured, Business Continuity Planning, Incident Management, Artificial Intelligence

Can You Spot a Deepfake? What Every Employee Should Know

Deepfakes are quickly becoming one of the most dangerous tools in modern social engineering. With accessible AI tools, anyone can easily generate…

Savannah Richardson Published Date: Jan 26, 2026 Risk Assessments, Security and Compliance

How to Perform an Information Asset-Based Risk Assessment

Risk assessments are a required part of a financial institution's Information Security Program, but understanding how to perform one based on…

Savannah Richardson Published Date: Jun 25, 2025 Cybersecurity Assessment Tool, Security and Compliance

Frequently Asked Questions about the NIST Cybersecurity Framework (CSF)

The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations of any size or complexity assess their…

Savannah Richardson Published Date: Apr 08, 2025 Vendor Management, Artificial Intelligence

How to Write an AI Policy

As artificial intelligence (AI) becomes more integrated with business operations, it's increasingly important to develop clear policies to manage…

Savannah Richardson Published Date: Dec 11, 2023 Security and Compliance, Incident Management

What Financial Institutions Need to Know: FTC Safeguards Rule Breach Notification

On November 13, 2023, the Federal Trade Commission (FTC) published a Final Rule in the Federal Register updating the Standards for Safeguarding…

Alyssa Pugh

Savannah Richardson Published Date: Oct 31, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Security and Compliance, Incident Management, Financial Institutions, Phishing, Banks

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an…

Savannah Richardson Published Date: Jul 13, 2023 Risk Assessments

Top Risk Assessment Software Features to Consider Before You Buy

As part of an information security program, an organization should perform IT risk assessments that provide reliable data about the threats the…

Thanks for visiting our

Tandem Blog

Savannah Richardson

CSBS AI Supervisory Framework: A Guide for Financial Institutions

Get our blog posts straight to your inbox.

Report on Deepfake Risk in Financial Institutions

Vibe Coding and AI Citizen Developers: Risk Management Tips for Banks and Credit Unions

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Can You Spot a Deepfake? What Every Employee Should Know

How to Perform an Information Asset-Based Risk Assessment

Frequently Asked Questions about the NIST Cybersecurity Framework (CSF)

How to Write an AI Policy

What Financial Institutions Need to Know: FTC Safeguards Rule Breach Notification

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

Top Risk Assessment Software Features to Consider Before You Buy