Information Security & Compliance Blog

Alyssa Pugh Published Date: Mar 12, 2026 Security and Compliance

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Savannah Richardson

Elizabeth Weathers Published Date: Feb 05, 2026 featured, Business Continuity Planning, Incident Management, Artificial Intelligence

Can You Spot a Deepfake? What Every Employee Should Know

Deepfakes are quickly becoming one of the most dangerous tools in modern social engineering. With accessible AI tools, anyone can easily generate…

Savannah Richardson Published Date: Jan 26, 2026 Risk Assessments, Security and Compliance

How to Perform an Information Asset-Based Risk Assessment

Risk assessments are a required part of a financial institution's Information Security Program, but understanding how to perform one based on…

Alyssa Pugh

Savannah Jones Published Date: Jan 02, 2026 Business Continuity Planning, Incident Management

Level Up Your Tabletop Exercises [Webinar Recap]

Tabletop exercises are a powerful tool for strengthening preparedness and resilience. When done well, they help validate plans, surface gaps, improve…

Alyssa Pugh Published Date: Dec 18, 2025 Cybersecurity Assessment Tool

Updated CISA Cybersecurity Performance Goals (CPGs)

The Cybersecurity and Infrastructure Security Agency (CISA) published version 2.0 of their Cross-Sector Cybersecurity Performance Goals (CPGs). Let's…

Alyssa Pugh Published Date: Nov 13, 2025

Securing Wearable Devices: New Technology, Same Old Risks

A customer recently asked how to manage the security risks posed by wearables, particularly in the context of visitors, and it's a great question.…

Alyssa Pugh Published Date: Sep 30, 2025 Credit Unions, Security and Compliance

NCUA Releases Updated ACET Application

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox…

Alyssa Pugh Published Date: Sep 23, 2025 Cybersecurity Assessment Tool, Security and Compliance

Texas SB 2610: What the New Law Means for Small Businesses

On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal…

Alyssa Pugh Published Date: Aug 22, 2025 Cybersecurity Assessment Tool, Security and Compliance

What is a Cybersecurity Control Self-Assessment?

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards.…

Alyssa Pugh Published Date: Aug 06, 2025 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions, Banks

Difference Between Risk Assessments and Cybersecurity Control Self-Assessments

"What is the difference between a risk assessment and a cybersecurity control self-assessment?"

Brian Whipple Published Date: Aug 04, 2025 Policy Management, Financial Institutions, Artificial Intelligence

How Financial Institutions Are Preparing for AI with Policies and Training

We recently hosted a webinar for information security professionals primarily at financial institutions on "How to Write an AI Policy." Over 200…

Alyssa Pugh Published Date: Jul 11, 2025 Incident Management

Updated NIST Incident Response Guidance: SP 800-61 Rev. 3

On April 3, 2025, the National Institute of Standards and Technology (NIST) released SP 800-61 Rev. 3, a new guide covering Incident Response…

Thanks for visiting our

Tandem Blog