Information Security & Compliance Blog

Alyssa Pugh Published Date: Nov 13, 2025

Securing Wearable Devices: New Technology, Same Old Risks

A customer recently asked how to manage the security risks posed by wearables, particularly in the context of visitors, and it's a great question.…

Alyssa Pugh Published Date: Sep 30, 2025 Credit Unions, Security and Compliance

NCUA Releases Updated ACET Application

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox…

Alyssa Pugh Published Date: Sep 23, 2025 Cybersecurity Assessment Tool, Security and Compliance

Texas SB 2610: What the New Law Means for Small Businesses

On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal…

Alyssa Pugh Published Date: Aug 22, 2025 Cybersecurity Assessment Tool, Security and Compliance

What is a Cybersecurity Control Self-Assessment?

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards.…

Alyssa Pugh Published Date: Aug 06, 2025 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions, Banks

Difference Between Risk Assessments and Cybersecurity Control Self-Assessments

"What is the difference between a risk assessment and a cybersecurity control self-assessment?"

Brian Whipple Published Date: Aug 04, 2025 Policy Management, Financial Institutions, Artificial Intelligence

How Financial Institutions Are Preparing for AI with Policies and Training

We recently hosted a webinar for information security professionals primarily at financial institutions on "How to Write an AI Policy." Over 200…

Alyssa Pugh Published Date: Jul 11, 2025 Incident Management

Updated NIST Incident Response Guidance: SP 800-61 Rev. 3

On April 3, 2025, the National Institute of Standards and Technology (NIST) released SP 800-61 Rev. 3, a new guide covering Incident Response…

Savannah Richardson Published Date: Jun 25, 2025 Cybersecurity Assessment Tool, Security and Compliance

Frequently Asked Questions about the NIST Cybersecurity Framework (CSF)

The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations of any size or complexity assess their…

Savannah Jones Published Date: Jun 10, 2025 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

What Financial Institutions Say They Are Using to Replace the FFIEC CAT

The Retirement of the CAT as a Cybersecurity Framework The FFIEC Cybersecurity Assessment Tool (CAT) has been a go-to resource for financial…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

Building a Data Compliance Program for the DOJ’s New Security Rule with Tandem

The Department of Justice recently finalized a new rule on Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries…

Alyssa Pugh Published Date: May 15, 2025 Security and Compliance

What the DOJ’s New Security Rule Means for Financial Institutions

On April 8, 2025, a final rule from the Department of Justice (DOJ) went into effect on Preventing Access to U.S. Sensitive Personal Data and…

Alyssa Pugh Published Date: Apr 30, 2025 Policy Management

How Soon Should Vulnerabilities Be Patched?

If you've worked in security for more than a minute, you know vulnerability and patch management are important.

Thanks for visiting our

Tandem Blog