Information Security & Compliance Blog

Alyssa Pugh Published Date: Mar 14, 2023 Credit Unions

5 Things Credit Unions Need to Know about the Information Security Examination (ISE)

The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated…

Alyssa Pugh

Leticia Saiid Published Date: Feb 06, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Incident Management

Credit Unions: What to Expect in Your 2023 NCUA IT Exam

Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will…

Admin Published Date: Jan 09, 2023 Credit Unions, Security and Compliance, Phishing

Top Phishing Awareness Security Software Features to Consider Before You Buy

Phishing attacks are becoming more and more common as the years go on. You see phishing emails disguised as many things, from phony Microsoft 365…

Alyssa Pugh Published Date: Jan 05, 2023 Policy Management, Security and Compliance

Policies vs. Standards vs. Controls vs. Procedures

At Tandem, we regularly receive the question, "What's the difference between policies, standards, controls, and procedures?" This question is…

Alyssa Pugh Published Date: Dec 13, 2022 Policy Management, Security and Compliance

Key Sections of an Information Security Policy

"If you don't know where you are going, any road will take you there." – The Cheshire Cat, Alice in Wonderland by Lewis Carroll

Alyssa Pugh Published Date: Nov 21, 2022 Financial Institutions, Phishing

5 Ways to Improve Your Phishing Test Results

It's no secret that phishing tests are a commonly used form of security awareness training. In fact, the 2022 Tandem State of Cybersecurity Report…

Alyssa Pugh Published Date: Nov 21, 2022 Policy Management

How to Conduct a Policy Review Meeting

Picture this: You have a big event coming up, like an audit, an exam, a board report, you get the idea. You know they are going to ask for your…

Alyssa Pugh Published Date: Oct 10, 2022 Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Banks

6 Tips for Writing an Effective Information Security Policy

If you asked a hundred Information Security Officers (ISOs) about their favorite part of the job, I would be willing to venture a guess that exactly…

Alyssa Pugh Published Date: Sep 23, 2022 Security and Compliance, Incident Management, Financial Institutions, Banks

How to Know if Your Bank Must Report a Cybersecurity Incident

Since the effective date for the incident notification rule for banks, we have received several questions asking about whether an incident would be…

Alyssa Pugh Published Date: Aug 29, 2022 Credit Unions, Incident Management, Financial Institutions, Banks

Your Financial Institution Incident Management Guidance Cheat Sheet

During the development of our Incident Management product, we spent a lot of time researching and reviewing guidance, so we could know exactly what…

Alyssa Pugh Published Date: Aug 16, 2022 Financial Institutions, Banks

FFIEC Rescinds the E-Banking Booklet

On May 13, 2022, the FFIEC published an entry to the IT Examination Handbook Infobase What's New page stating that they had rescinded the E-Banking…

Alyssa Pugh Published Date: Aug 01, 2022 Credit Unions, Financial Institutions, Banks

Difference Between Electronic Banking, Internet Banking, Mobile Banking, Open Banking, and Digital Banking

If you work in a financial institution, you may be familiar with using the terms "electronic banking," "internet banking," and "mobile banking"…

Thanks for visiting our

Tandem Blog