Information Security & Compliance Blog

Alyssa Pugh Published Date: Jul 29, 2022 Credit Unions, Incident Management

The Proposed Cyber Incident Notification Requirements for Credit Unions

On July 21, 2022, the National Credit Union Administration (NCUA) published a new proposed rule titled "Cyber Incident Notification Requirements for…

Alyssa Pugh Published Date: Jul 18, 2022 Credit Unions, Incident Management, Financial Institutions, Banks

Security Incident Management Training: What Employees Need to Know

Every member of your staff is responsible for doing their part to help secure the organization from incidents, but do they know that? Employee…

Alyssa Pugh Published Date: Jul 07, 2022 Credit Unions, Financial Institutions

Credit Unions and Crypto: The NCUA’s Take on DLT and Digital Assets

As distributed ledger technology has evolved over the last few years, the National Credit Union Administration (NCUA) has stepped into the unknown…

Alyssa Pugh Published Date: Jun 28, 2022 Credit Unions, Financial Institutions, Banks

An Overview of the FTC Safeguards Rule

On December 9, 2021, the Federal Trade Commission (FTC) published their revised Standards for Safeguarding Customer Information (16 CFR Part 314) in…

Alyssa Pugh Published Date: Jun 13, 2022 Credit Unions Phishing Financial Institutions

NCUA Alerts Credit Unions on Heightened Risk of Phishing

At the end of March 2022, the NCUA published a new risk alert titled Heightened Risk of Social Engineering and Phishing Attacks. Citing the ongoing…

Alyssa Pugh Published Date: May 10, 2022 featured, Credit Unions Banks Financial Institutions Vendor

Creative Vendor Management: Managing FinTech Relationships

On August 27, 2021, the Federal Deposit Insurance Corporation (FDIC), the Board of Governors of the Federal Reserve System (FRB), and the Office of…

Alyssa Pugh Published Date: Apr 27, 2022 Risk Assessments, Credit Unions, Financial Institutions, Banks

What is a GLBA Risk Assessment?

In a recent Tandem "Ask Me Anything" webinar on risk assessments, one of the attendees asked, "What is a GLBA risk assessment?" This is a great…

Alyssa Pugh Published Date: Apr 08, 2022 Policy Management, Credit Unions, Incident Management, Financial Institutions, Banks

New Cyber Incident Reporting Act

Before You Read: This blog is about the original Cyber Incident Reporting Act and may contain outdated information. For an updated overview of the…

Alyssa Pugh Published Date: Mar 15, 2022 Career, Credit Unions, Financial Institutions, Banks

What to Do if Your ISO Leaves

Finding the right person to be your information security officer (ISO) can be a challenge. The person filling this role often wears many hats, most…

Alyssa Pugh Published Date: Mar 03, 2022 Credit Unions, Security and Compliance, Financial Institutions, Banks

4 Things to Consider Before Hiring a vISO

Working in cybersecurity can be exhausting. Not only must Information Security Officers (ISOs) be well-versed in the ever-changing world of…

Alyssa Pugh Published Date: Feb 04, 2022 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Audit Management, Incident Management, Banks

Why CISA Wants You to “Implement Cybersecurity Measures Now”

On January 18, 2022, the Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) released a new "Insights" memo with…

Alyssa Pugh Published Date: Jan 04, 2022 Vendor Management, Risk Assessments, Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Phishing, Banks

What is Multifactor Authentication?

In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication…

Thanks for visiting our

Tandem Blog