Information Security & Compliance Blog

Alyssa Pugh Published Date: Aug 08, 2024 Vendor Management

A Vendor Manager’s Guide to Service Level Agreements (SLAs)

What is an SLA? A service level agreement (SLA) is a specific type of contract between a vendor and a business. It defines performance measures and…

Alyssa Pugh Published Date: Jul 30, 2024 Vendor Management, Incident Management

Regulation S-P: An Overview of the SEC’s Latest Cybersecurity Amendments

On June 3, 2024, the Securities and Exchange Commission (SEC) published a final rule titled Regulation S-P: Privacy of Consumer Financial Information…

Alyssa Pugh Published Date: Jul 24, 2024 Risk Assessments

Growing Cybersecurity: A Look at the FCA’s New Cyber Risk Management Rule

The Farm Credit Administration (FCA) final rule goes into effect on January 1, 2025. If you work for a farm credit institution, what does the final…

Alyssa Pugh Published Date: Jul 16, 2024 Business Continuity Planning, Incident Management

BCP and IRP Exercises & Tests: Frequently Asked Questions

Businesses are expected to put their business continuity and incident response plans to the test. But what does that mean exactly? If the whole…

Alyssa Pugh Published Date: Jun 17, 2024 Vendor Management

The New Third-Party Risk Management Guide for Community Banks

On May 3, 2024, three of the federal banking agencies published a new Third-Party Risk Management Guide for Community Banks. This guide was published…

Alyssa Pugh Published Date: May 06, 2024 Security and Compliance, Financial Institutions

GLBA Compliance: The Legislation, the Standards, and the Guidance

If you work for a financial institution, you may have heard the term GLBA once or twice. Or a lot. In our experience, people often use the term GLBA…

Alyssa Pugh Published Date: Apr 15, 2024 Security and Compliance, Incident Management, Financial Institutions

A Financial Institution’s Guide to CISA’s Proposed CIRCIA Reporting Requirements

On April 4, 2024, CISA published a proposed rule in the Federal Register titled Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)…

Alyssa Pugh Published Date: Mar 05, 2024 Vendor Management, Security and Compliance, Financial Institutions

6 Key Updates in the NIST Cybersecurity Framework (CSF) 2.0

On February 26, 2024, the National Institute of Standards and Technology (NIST) published an update to their Cybersecurity Framework (CSF). A decade…

Alyssa Pugh Published Date: Jan 29, 2024 Security and Compliance, Audit Management, Financial Institutions

FDIC Releases Updated InTREx Procedures

On September 29, 2023, the Federal Deposit Insurance Corporation (FDIC) published FIL-52-2023 announcing the updated Information Technology Risk…

Savannah Richardson Published Date: Dec 11, 2023 Security and Compliance, Incident Management

What Financial Institutions Need to Know: FTC Safeguards Rule Breach Notification

On November 13, 2023, the Federal Trade Commission (FTC) published a Final Rule in the Federal Register updating the Standards for Safeguarding…

Alyssa Pugh

Savannah Richardson Published Date: Oct 31, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Security and Compliance, Incident Management, Financial Institutions, Phishing, Banks

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an…

Alyssa Pugh Published Date: Oct 02, 2023 Audit Management

How to Respond to an Audit or Exam Finding

While findings may be a normal part of an audit or examination, that doesn't make them any less daunting to navigate. Sometimes findings catch us…

Thanks for visiting our

Tandem Blog