Tandem Blog

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors | Tandem

Alyssa Pugh — Mon, 27 Jul 2026 15:44:57 GMT

So, your organization has decided to work with a new vendor that offers "AI-powered" or "AI-enabled" services. While some people may see dollar signs and efficiency gains, you (as a vendor manager) may be seeing something else: A whole lot of risk.

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks | Tandem

Alyssa Pugh — Tue, 14 Jul 2026 18:15:13 GMT

The Cybersecurity and Infrastructure Security Agency (CISA), alongside international partners, has published a series of Artificial Intelligence (AI) Resources, including two cybersecurity control frameworks.

Five Steps to Comply with the NCUA's Vital Records Preservation Rule - Tandem

Alyssa Pugh — Wed, 17 Jun 2026 14:00:00 GMT

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The final rule is effective July 16, 2026.

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions - Tandem

Alyssa Pugh — Thu, 11 Jun 2026 14:00:00 GMT

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide released by the Conference of State Bank Supervisors (CSBS) in December 2025.

Vibe Coding and AI Citizen: Risk Management Tips for Banks and Credit Unions - Tandem

Savannah Richardson — Tue, 19 May 2026 14:00:00 GMT

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update) - Tandem

Alyssa Pugh — Thu, 14 May 2026 05:15:00 GMT

Federal banking regulators are increasingly approaching AI with cautious optimism. Here's what community banks and credit unions need to know in 2026.

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It - Tandem

Alyssa Pugh — Thu, 19 Mar 2026 14:00:00 GMT

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References - Tandem

Alyssa Pugh — Thu, 12 Mar 2026 14:30:00 GMT

Can You Spot a Deepfake? What Every Employee Should Know - Tandem

Savannah Richardson — Thu, 05 Feb 2026 06:00:00 GMT

Deepfakes are quickly becoming one of the most dangerous tools in modern social engineering. With accessible AI tools, anyone can easily generate realistic voices, videos, and images that imitate real people, and attackers are using them to manipulate organizations.

How to Perform an Information Asset-Based Risk Assessment - Tandem

Savannah Richardson — Mon, 26 Jan 2026 06:00:00 GMT

Risk assessments are a required part of a financial institution's Information Security Program, but understanding how to perform one based on information assets is where many organizations get stuck. What counts as an information asset? How do you evaluate risk at the information asset level? And how does this connect to your Information Security Program?