Information Security & Compliance Blog - Tandem

Security and compliance

Alyssa Pugh Published Date: Jul 14, 2026 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance, Artificial Intelligence

CISA Artificial Intelligence Cybersecurity Risk Management Frameworks

The Cybersecurity and Infrastructure Security Agency (CISA), alongside international partners, has published a series of Artificial Intelligence (AI)…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Jun 17, 2026 Vendor Management, Business Continuity Planning, Credit Unions, Security and Compliance

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The…

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Savannah Richardson Published Date: May 19, 2026 Vendor Management, Credit Unions, Security and Compliance, Financial Institutions, Banks, Artificial Intelligence

Vibe Coding and AI Citizen Developers: Risk Management Tips for Banks and Credit Unions

Alyssa Pugh Published Date: Mar 19, 2026 Security and Compliance, Incident Management, Financial Institutions

Compliance vs. Convenience: The Risk of AI Notetakers and How to Manage It

Alyssa Pugh Published Date: Mar 12, 2026 Security and Compliance

Updated FFIEC IT Examination Handbook: Removed Reputation Risk References

Savannah Richardson Published Date: Jan 26, 2026 Risk Assessments, Security and Compliance

How to Perform an Information Asset-Based Risk Assessment

Risk assessments are a required part of a financial institution's Information Security Program, but understanding how to perform one based on…

Alyssa Pugh Published Date: Sep 30, 2025 Credit Unions, Security and Compliance

NCUA Releases Updated ACET Application

On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox…

Alyssa Pugh Published Date: Sep 23, 2025 Cybersecurity Assessment Tool, Security and Compliance

Texas SB 2610: What the New Law Means for Small Businesses

On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal…

Alyssa Pugh Published Date: Aug 22, 2025 Cybersecurity Assessment Tool, Security and Compliance

What is a Cybersecurity Control Self-Assessment?

A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards.…

Alyssa Pugh Published Date: Aug 06, 2025 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance, Financial Institutions, Banks

Difference Between Risk Assessments and Cybersecurity Control Self-Assessments

"What is the difference between a risk assessment and a cybersecurity control self-assessment?"

Savannah Richardson Published Date: Jun 25, 2025 Cybersecurity Assessment Tool, Security and Compliance

Frequently Asked Questions about the NIST Cybersecurity Framework (CSF)

The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations of any size or complexity assess their…

Thanks for visiting our

Tandem Blog