Information Security & Compliance Blog

Alyssa Pugh Published Date: Aug 12, 2021 Risk Assessments, Cybersecurity Assessment Tool

Integrating Cybersecurity and Enterprise Risk Management (ERM)

In October 2020, the National Institute of Standards and Technology (NIST) published NISTIR 8286 over Integrating Cybersecurity and Enterprise Risk…

Alyssa Pugh Published Date: Jul 29, 2021 Vendor Management

Proposed Vendor Management Guidance: What Banks Need to Know

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Admin Published Date: Jul 23, 2021 Security and Compliance, Financial Institutions

ISO Management and Staffing in 2021

Welcome to the first of our eight-part content series based on data pulled from our 2021 State of Cybersecurity Report. Earlier this year, Tandem…

Alyssa Pugh Published Date: Jul 08, 2021 Incident Management

How to Classify Security Incidents for Easier Response

When a security incident occurs, an early step in the analysis stage is to answer the question, "How bad is it?" Having an intentional approach to…

Alyssa Pugh Published Date: Jul 08, 2021 Vendor Management, Incident Management

Incident Response Plan Communication Guidelines

There is no question that when an incident occurs, there are a lot of people who may need to be notified, especially if you work for a financial…

Alyssa Pugh Published Date: Jul 08, 2021 Business Continuity Planning, Security and Compliance, Financial Institutions

FFIEC Releases New Architecture, Infrastructure, and Operations Booklet

On June 30, 2021, the Federal Financial Institutions Examination Council (FFIEC) released a new Architecture, Infrastructure, and Operations (AIO)…

Alyssa Pugh Published Date: May 14, 2021 Vendor Management, Risk Assessments, Business Continuity Planning, Cybersecurity Assessment Tool, Security and Compliance, Phishing

What Sets Tandem Apart?

At Tandem, we recognize there are a few GRC (governance, risk, and compliance) solutions on the market. So, why should you pick Tandem? Based on…

Alyssa Pugh Published Date: Apr 29, 2021 Vendor Management

Bank Service Company Act (BSCA) Frequently Asked Questions

In recent months, there has been a noted increase in the number of questions and conversations about the Bank Service Company Act (or "BSCA"). In…

Alyssa Pugh Published Date: Apr 08, 2021 Phishing

Phishing Spotlight: Tax Season Scams

In February 2021, the Internal Revenue Service (IRS) published an alert regarding a new tax phishing scam. According to the alert, the malicious…

Alyssa Pugh Published Date: Mar 30, 2021 Incident Management, Phishing

Incident Management: Seven Best Practices to Prepare for Security Incidents

According to the Tandem State of Cybersecurity 2020 Survey Report, the top three incidents experienced in 2019 by financial institutions were social…

Alyssa Pugh Published Date: Mar 18, 2021 Incident Management

The Six Phases of an Effective Incident Response Plan

Incident response planning can be risky business. It requires you to consider what could happen in the future, so you can best plan for it now.…

Alyssa Pugh Published Date: Mar 04, 2021 Vendor Management, Incident Management

Third-Party Incident Response Playbook

Organizations partner with third parties when the benefit to the organization is perceived to be greater than the risk of outsourcing. With access to…

Thanks for visiting our

Tandem Blog