Information Security & Compliance Blog

Alyssa Pugh Published Date: Jun 01, 2023 Business Continuity Planning

Top BCP Software Features to Consider Before You Buy

Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a…

Alyssa Pugh Published Date: May 04, 2023 Business Continuity Planning, Policy Management, Incident Management, Mortgage Companies

An Overview of Freddie Mac’s Updated Information Security Requirements

On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie…

Alyssa Pugh Published Date: Mar 28, 2023 Financial Institutions

Financial Institutions & Quantum Computing: A Cybersecurity Compliance Timeline

"Quantum computing" started as a theory decades ago. Today it is becoming a reality with companies like IBM launching powerful quantum computers and…

Alyssa Pugh Published Date: Mar 14, 2023 Credit Unions

5 Things Credit Unions Need to Know about the Information Security Examination (ISE)

The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated…

Alyssa Pugh

Leticia Saiid Published Date: Feb 06, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Incident Management

Credit Unions: What to Expect in Your 2023 NCUA IT Exam

Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will…

Admin Published Date: Jan 09, 2023 Credit Unions, Security and Compliance, Phishing

Top Phishing Awareness Security Software Features to Consider Before You Buy

Phishing attacks are becoming more and more common as the years go on. You see phishing emails disguised as many things, from phony Microsoft 365…

Alyssa Pugh Published Date: Jan 05, 2023 Policy Management, Security and Compliance

Policies vs. Standards vs. Controls vs. Procedures

At Tandem, we regularly receive the question, "What's the difference between policies, standards, controls, and procedures?" This question is…

Alyssa Pugh Published Date: Dec 13, 2022 Policy Management, Security and Compliance

Key Sections of an Information Security Policy

"If you don't know where you are going, any road will take you there." – The Cheshire Cat, Alice in Wonderland by Lewis Carroll

Alyssa Pugh Published Date: Nov 21, 2022 Financial Institutions, Phishing

5 Ways to Improve Your Phishing Test Results

It's no secret that phishing tests are a commonly used form of security awareness training. In fact, the 2022 Tandem State of Cybersecurity Report…

Alyssa Pugh Published Date: Nov 21, 2022 Policy Management

How to Conduct a Policy Review Meeting

Picture this: You have a big event coming up, like an audit, an exam, a board report, you get the idea. You know they are going to ask for your…

Alyssa Pugh Published Date: Oct 10, 2022 Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Banks

6 Tips for Writing an Effective Information Security Policy

If you asked a hundred Information Security Officers (ISOs) about their favorite part of the job, I would be willing to venture a guess that exactly…

Alyssa Pugh Published Date: Sep 23, 2022 Security and Compliance, Incident Management, Financial Institutions, Banks

How to Know if Your Bank Must Report a Cybersecurity Incident

Since the effective date for the incident notification rule for banks, we have received several questions asking about whether an incident would be…

Thanks for visiting our

Tandem Blog