Information Security & Compliance Blog

Alyssa Pugh Published Date: Nov 23, 2021 Risk Assessments, Policy Management, Credit Unions, Audit Management, Financial Institutions, Banks

What is an IT Audit Risk Assessment?

At Tandem, we occasionally receive questions from our clients on the topic of an "IT audit risk assessment," most often in reference to an…

Alyssa Pugh Published Date: Nov 11, 2021 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance

The Changing Definition of Risk

When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.

Alyssa Pugh Published Date: Oct 15, 2021 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

How Often Should You Complete the FFIEC Cybersecurity Assessment Tool?

IMPORTANT DISCLAIMER On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool…

Leticia Saiid Published Date: Oct 06, 2021 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance

How InTREx-CU Will Affect Your 2022 NCUA Exam

In January 2021, the National Credit Union Administration (NCUA) published their 2021 Supervisory Priorities which stated, "The agency has…

Alyssa Pugh Published Date: Sep 14, 2021 Security and Compliance, Financial Institutions

FedLine Solutions Security and Resiliency Assurance Program

To promote the security of payment systems, the Federal Reserve has an initiative in place called the FedLine Solutions Security and Resiliency…

Alyssa Pugh Published Date: Sep 14, 2021 Risk Assessments, Incident Management, Phishing

Ransomware Incident Response Playbook

Organizations invest in technology because it improves efficiency, communications, data storage, and business growth opportunities. With increased…

Lauren Wiley Published Date: Aug 27, 2021 Financial Institutions

Top Trends in Cybersecurity Spending for Financial Institutions

In our recent State of Cybersecurity survey, we set out to find any trends among U.S. financial institutions when it comes to budgeting for IT and…

Alyssa Pugh Published Date: Aug 12, 2021 Risk Assessments, Cybersecurity Assessment Tool

Integrating Cybersecurity and Enterprise Risk Management (ERM)

In October 2020, the National Institute of Standards and Technology (NIST) published NISTIR 8286 over Integrating Cybersecurity and Enterprise Risk…

Alyssa Pugh Published Date: Jul 29, 2021 Vendor Management

Proposed Vendor Management Guidance: What Banks Need to Know

On July 19, 2021, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC)…

Admin Published Date: Jul 23, 2021 Security and Compliance, Financial Institutions

ISO Management and Staffing in 2021

Welcome to the first of our eight-part content series based on data pulled from our 2021 State of Cybersecurity Report. Earlier this year, Tandem…

Alyssa Pugh Published Date: Jul 08, 2021 Incident Management

How to Classify Security Incidents for Easier Response

When a security incident occurs, an early step in the analysis stage is to answer the question, "How bad is it?" Having an intentional approach to…

Alyssa Pugh Published Date: Jul 08, 2021 Vendor Management, Incident Management

Incident Response Plan Communication Guidelines

There is no question that when an incident occurs, there are a lot of people who may need to be notified, especially if you work for a financial…

Thanks for visiting our

Tandem Blog