Information Security & Compliance Blog - Tandem

Security and compliance

Alyssa Pugh Published Date: Dec 13, 2022 Policy Management, Security and Compliance

Key Sections of an Information Security Policy

"If you don't know where you are going, any road will take you there." – The Cheshire Cat, Alice in Wonderland by Lewis Carroll

Alyssa Pugh Published Date: Oct 10, 2022 Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Banks

6 Tips for Writing an Effective Information Security Policy

If you asked a hundred Information Security Officers (ISOs) about their favorite part of the job, I would be willing to venture a guess that exactly…

Alyssa Pugh Published Date: Sep 23, 2022 Security and Compliance, Incident Management, Financial Institutions, Banks

How to Know if Your Bank Must Report a Cybersecurity Incident

Since the effective date for the incident notification rule for banks, we have received several questions asking about whether an incident would be…

Alyssa Pugh Published Date: Mar 03, 2022 Credit Unions, Security and Compliance, Financial Institutions, Banks

4 Things to Consider Before Hiring a vISO

Working in cybersecurity can be exhausting. Not only must Information Security Officers (ISOs) be well-versed in the ever-changing world of…

Alyssa Pugh Published Date: Jan 04, 2022 Vendor Management, Risk Assessments, Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Phishing, Banks

What is Multifactor Authentication?

In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication…

Alyssa Pugh Published Date: Nov 11, 2021 Risk Assessments, Cybersecurity Assessment Tool, Security and Compliance

The Changing Definition of Risk

When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.

Alyssa Pugh Published Date: Oct 15, 2021 Cybersecurity Assessment Tool, Security and Compliance, Financial Institutions

How Often Should You Complete the FFIEC Cybersecurity Assessment Tool?

IMPORTANT DISCLAIMER On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool…

Leticia Saiid Published Date: Oct 06, 2021 Cybersecurity Assessment Tool, Credit Unions, Security and Compliance

How InTREx-CU Will Affect Your 2022 NCUA Exam

In January 2021, the National Credit Union Administration (NCUA) published their 2021 Supervisory Priorities which stated, "The agency has…

Alyssa Pugh Published Date: Sep 14, 2021 Security and Compliance, Financial Institutions

FedLine Solutions Security and Resiliency Assurance Program

To promote the security of payment systems, the Federal Reserve has an initiative in place called the FedLine Solutions Security and Resiliency…

Admin Published Date: Jul 23, 2021 Security and Compliance, Financial Institutions

ISO Management and Staffing in 2021

Welcome to the first of our eight-part content series based on data pulled from our 2021 State of Cybersecurity Report. Earlier this year, Tandem…

Alyssa Pugh Published Date: Jul 08, 2021 Business Continuity Planning, Security and Compliance, Financial Institutions

FFIEC Releases New Architecture, Infrastructure, and Operations Booklet

On June 30, 2021, the Federal Financial Institutions Examination Council (FFIEC) released a new Architecture, Infrastructure, and Operations (AIO)…

Alyssa Pugh Published Date: May 14, 2021 Vendor Management, Risk Assessments, Business Continuity Planning, Cybersecurity Assessment Tool, Security and Compliance, Phishing

What Sets Tandem Apart?

At Tandem, we recognize there are a few GRC (governance, risk, and compliance) solutions on the market. So, why should you pick Tandem? Based on…

Thanks for visiting our

Tandem Blog