Information Security & Compliance Blog

Alyssa Pugh Published Date: Oct 15, 2019 Vendor Management, Security and Compliance, Financial Institutions

Vendor Management & OFAC: FAQs for Banks and Credit Unions

If you are a vendor manager at a bank or credit union, you may be familiar with checking OFAC, but have you ever paused to ask why? Who exactly is…

Russ Horn Published Date: Aug 22, 2019 Identity Theft Prevention Program, Credit Unions, Security and Compliance, Financial Institutions

NCUA Alerts Credit Unions about Business Email Compromise Fraud

This month, the National Credit Union Administration (NCUA) issued a Risk Alert (19-RISK-01) describing the increasing frequency of and losses…

Alyssa Pugh Published Date: Jun 30, 2019 Risk Assessments, Security and Compliance, Financial Institutions

What is a Multifactor Authentication Risk Assessment?

The concept of a multifactor authentication (MFA) risk assessment has recently become a topic of conversation in the information security community.…

Russ Horn Published Date: Oct 19, 2018 Credit Unions, Security and Compliance, Financial Institutions

NCUA Automated Cybersecurity Examination Tool (ACET) Frequently Asked Questions

If you are a credit union, you should expect to see the ACET during your next IT examination. The NCUA began piloting this new examination tool in…

Russ Horn Published Date: Sep 29, 2018 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions

How is the NCUA ACET different from the FFIEC CAT?

In 2018, the NCUA began piloting the use of the Automated Cybersecurity Examination Tool (ACET) based on the FFIEC's Cybersecurity Assessment Tool…

Samantha Torrez-Hidalgo Published Date: Sep 18, 2018 Security and Compliance, Financial Institutions, Social Media Management

Achieving Social Media Goals with Security in Mind

The article was published in the September 2018 edition of the Kansas Banker Magazine.

Alyssa Pugh Published Date: Aug 14, 2018 Security and Compliance, Financial Institutions

How Colorado Financial Institutions Should Prepare for (HB 18-1128)

What is Colorado Cybersecurity Regulation (HB 18-1128)? On January 19, 2018, the General Assembly of the State of Colorado introduced House Bill…

Leticia Saiid Published Date: Jul 13, 2018 Vendor Management, Security and Compliance

A More Accurate Method for Collecting Due Diligence Documents from Third Parties

How do you know what due diligence documents to gather from each of your vendors? There are many methods available, but some result in more accurate…

Carl Cope Published Date: Jun 23, 2018 Security and Compliance, Financial Institutions

5 Essential Information Security Best Practices as a Financial Institution ISO

Early this year the tech world was rocked with the announcement of two unprecedented vulnerabilities named Meltdown and Spectre.

Leticia Saiid Published Date: Jun 10, 2018 Vendor Management, Security and Compliance

Review your Vendor’s SOC Report (SSAE 18) in 15 Minutes

Ideally, reviewing a SOC Report will take you 15 minutes or less (once you get the hang of it). If you are a financial institution and you have…

Alyssa Pugh Published Date: Jun 02, 2018 Security and Compliance, Financial Institutions

6 Key Qualities of Information Security Officers (ISOs) According to the FFIEC

In September 2016, the Federal Financial Institutions Examination Council (FFIEC) released an updated Information Security Booklet as part of the IT…

Russ Horn Published Date: Jan 21, 2018 Security and Compliance, Financial Institutions

Understanding the Role of an ISO

This article was published in the Jan/Feb 2018 edition of the Nebraska Banker magazine.

Thanks for visiting our

Tandem Blog