Information Security & Compliance Blog - Tandem

Incident management

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Mar 19, 2026 Security and Compliance, Incident Management, Financial Institutions

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Savannah Richardson

Elizabeth Weathers Published Date: Feb 05, 2026 featured, Business Continuity Planning, Incident Management, Artificial Intelligence

Can You Spot a Deepfake? What Every Employee Should Know

Deepfakes are quickly becoming one of the most dangerous tools in modern social engineering. With accessible AI tools, anyone can easily generate…

Alyssa Pugh

Savannah Jones Published Date: Jan 02, 2026 Business Continuity Planning, Incident Management

Level Up Your Tabletop Exercises [Webinar Recap]

Tabletop exercises are a powerful tool for strengthening preparedness and resilience. When done well, they help validate plans, surface gaps, improve…

Alyssa Pugh Published Date: Jul 11, 2025 Incident Management

Updated NIST Incident Response Guidance: SP 800-61 Rev. 3

On April 3, 2025, the National Institute of Standards and Technology (NIST) released SP 800-61 Rev. 3, a new guide covering Incident Response…

Alyssa Pugh Published Date: Mar 24, 2025 Business Continuity Planning, Incident Management

How to Conduct an Effective Tabletop Exercise

Special thanks to Tandem Partner, Boost Consulting, for their contributions to this article. Boost Consulting specializes in providing information…

Alyssa Pugh Published Date: Jul 30, 2024 Vendor Management, Incident Management

Regulation S-P: An Overview of the SEC’s Latest Cybersecurity Amendments

On June 3, 2024, the Securities and Exchange Commission (SEC) published a final rule titled Regulation S-P: Privacy of Consumer Financial Information…

Alyssa Pugh Published Date: Jul 16, 2024 Business Continuity Planning, Incident Management

BCP and IRP Exercises & Tests: Frequently Asked Questions

Businesses are expected to put their business continuity and incident response plans to the test. But what does that mean exactly? If the whole…

Alyssa Pugh Published Date: Apr 15, 2024 Security and Compliance, Incident Management, Financial Institutions

A Financial Institution’s Guide to CISA’s Proposed CIRCIA Reporting Requirements

On April 4, 2024, CISA published a proposed rule in the Federal Register titled Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)…

Savannah Richardson Published Date: Dec 11, 2023 Security and Compliance, Incident Management

What Financial Institutions Need to Know: FTC Safeguards Rule Breach Notification

On November 13, 2023, the Federal Trade Commission (FTC) published a Final Rule in the Federal Register updating the Standards for Safeguarding…

Alyssa Pugh

Savannah Richardson Published Date: Oct 31, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Security and Compliance, Incident Management, Financial Institutions, Phishing, Banks

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an…

Alyssa Pugh Published Date: Jul 10, 2023 Incident Management, Financial Institutions

The OCC’s Cybersecurity Supervision Work Program (CSW)

On June 26, 2023, the Office of the Comptroller of the Currency (OCC) published Bulletin 2023-22: Cybersecurity Supervision Work Program. Let's look…

Thanks for visiting our

Tandem Blog