Information Security & Compliance Blog

Alyssa Pugh Published Date: Mar 03, 2022 Credit Unions, Security and Compliance, Financial Institutions, Banks

4 Things to Consider Before Hiring a vISO

Working in cybersecurity can be exhausting. Not only must Information Security Officers (ISOs) be well-versed in the ever-changing world of…

Alyssa Pugh Published Date: Feb 04, 2022 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Audit Management, Incident Management, Banks

Why CISA Wants You to “Implement Cybersecurity Measures Now”

On January 18, 2022, the Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) released a new "Insights" memo with…

Alyssa Pugh Published Date: Jan 04, 2022 Vendor Management, Risk Assessments, Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Phishing, Banks

What is Multifactor Authentication?

In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication…

Alyssa Pugh Published Date: Dec 08, 2021 Credit Unions, Incident Management, Financial Institutions, Banks

5 Benefits of an Incident Tracking System

In January 2021, we asked a group of 175 financial institution cybersecurity professionals if their organization had a formal incident tracking…

Alyssa Pugh Published Date: Nov 24, 2021 Incident Management, Banks

The New Incident Notification Rule: What Banks Need to Know

On November 18, 2021, the FDIC, OCC, and Federal Reserve published a final rule titled "Computer-Security Incident Notification Requirements for…

Alyssa Pugh Published Date: Nov 23, 2021 Risk Assessments, Policy Management, Credit Unions, Audit Management, Financial Institutions, Banks

What is an IT Audit Risk Assessment?

At Tandem, we occasionally receive questions from our clients on the topic of an "IT audit risk assessment," most often in reference to an…

Alyssa Pugh Published Date: Nov 11, 2021 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance

The Changing Definition of Risk

When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.

Alyssa Pugh Published Date: Oct 15, 2021 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

How Often Should You Complete the FFIEC Cybersecurity Assessment Tool?

IMPORTANT DISCLAIMER On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool…

Leticia Saiid Published Date: Oct 06, 2021 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance

How InTREx-CU Will Affect Your 2022 NCUA Exam

In January 2021, the National Credit Union Administration (NCUA) published their 2021 Supervisory Priorities which stated, "The agency has…

Alyssa Pugh Published Date: Sep 14, 2021 Security and Compliance, Financial Institutions

FedLine Solutions Security and Resiliency Assurance Program

To promote the security of payment systems, the Federal Reserve has an initiative in place called the FedLine Solutions Security and Resiliency…

Alyssa Pugh Published Date: Sep 14, 2021 Risk Assessments, Incident Management, Phishing

Ransomware Incident Response Playbook

Organizations invest in technology because it improves efficiency, communications, data storage, and business growth opportunities. With increased…

Lauren Wiley Published Date: Aug 27, 2021 Financial Institutions

Top Trends in Cybersecurity Spending for Financial Institutions

In our recent State of Cybersecurity survey, we set out to find any trends among U.S. financial institutions when it comes to budgeting for IT and…

Thanks for visiting our

Tandem Blog