Information Security & Compliance Blog

Elizabeth Weathers Published Date: Aug 15, 2023 Phishing

12 Simulated Phishing Templates to Cover Your Calendar Year

If you are responsible for conducting a monthly simulated phishing test, sometimes choosing a great phishing template every month can be…

Alyssa Pugh Published Date: Jul 20, 2023 Cybersecurity Assessment Tool, Credit Unions

A Complete History of the FFIEC CAT

The FFIEC Cybersecurity Assessment Tool (CAT) has a rich history. The purpose of this article is to provide a comprehensive timeline of the FFIEC CAT…

Savannah Richardson Published Date: Jul 13, 2023 Risk Assessments

Top Risk Assessment Software Features to Consider Before You Buy

As part of an information security program, an organization should perform IT risk assessments that provide reliable data about the threats the…

Alyssa Pugh Published Date: Jul 10, 2023 Incident Management, Financial Institutions

The OCC’s Cybersecurity Supervision Work Program (CSW)

On June 26, 2023, the Office of the Comptroller of the Currency (OCC) published Bulletin 2023-22: Cybersecurity Supervision Work Program. Let's look…

Samantha Torrez-Hidalgo Published Date: Jun 29, 2023 Policy Management

Top Policies Software Features to Consider Before You Buy

Managing information security policies is an ongoing task – it doesn't stop once the policy has been written and approved by the board. Storing…

Alyssa Pugh Published Date: Jun 15, 2023 Policy Management, Credit Unions, Incident Management

Reportable Cyber Incidents: An Overview of the NCUA’s New Notification Rule

Note: This article was updated on January 13, 2025. See the update log at the bottom of the article.

Alyssa Pugh Published Date: Jun 08, 2023 Vendor Management, Risk Assessments, Banks

New Third-Party Risk Management Guidance: What Community Banks Need to Know

On June 6, 2023, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC)…

Alyssa Pugh Published Date: Jun 01, 2023 Business Continuity Planning

Top BCP Software Features to Consider Before You Buy

Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a…

Alyssa Pugh Published Date: May 04, 2023 Business Continuity Planning, Policy Management, Incident Management, Mortgage Companies

An Overview of Freddie Mac’s Updated Information Security Requirements

On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie…

Alyssa Pugh Published Date: Mar 28, 2023 Financial Institutions

Financial Institutions & Quantum Computing: A Cybersecurity Compliance Timeline

"Quantum computing" started as a theory decades ago. Today it is becoming a reality with companies like IBM launching powerful quantum computers and…

Alyssa Pugh Published Date: Mar 14, 2023 Credit Unions

5 Things Credit Unions Need to Know about the Information Security Examination (ISE)

The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated…

Alyssa Pugh

Leticia Saiid Published Date: Feb 06, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Incident Management

Credit Unions: What to Expect in Your 2023 NCUA IT Exam

Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will…

Thanks for visiting our

Tandem Blog