Information Security & Compliance Blog - Tandem

Vendor management

Savannah Richardson Published Date: Oct 22, 2026 Vendor Management, Risk Assessments, Financial Institutions, Artificial Intelligence

CSBS AI Supervisory Framework: A Guide for Financial Institutions

Artificial Intelligence (AI) is already present in many financial institutions. Sometimes it is through tools employees use directly, such as ChatGPT…

Get our blog posts straight to your inbox.

Subscribe and receive 1 email per month filled with educational content on information security and compliance.

Alyssa Pugh Published Date: Oct 21, 2026 Vendor Management, Risk Assessments, Financial Institutions

New Federal Reserve Proposed TPRM Guide for Community Banks

On September 15, 2026, the Federal Reserve published a Proposed Third-Party Risk Management Guide for Traditional Community Banking Organizations…

Alyssa Pugh Published Date: Oct 07, 2026 Vendor Management, Risk Assessments, Financial Institutions

New Proposed Third-Party Risk Management (TPRM) Guidance | September 2026 Update

On September 15, 2026, the OCC, FRB, FDIC, and NCUA jointly published Proposed Third-Party Risk Management Guidance in the Federal Register. If…

Alyssa Pugh Published Date: Jul 27, 2026 Vendor Management, Artificial Intelligence

Third-Party Risk Management: 10 Tips for Managing Your AI Vendors

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jun 17, 2026 Vendor Management, Business Continuity Planning, Credit Unions, Security and Compliance

Five Steps to Comply with the NCUA's Vital Records Preservation Rule

On June 15, 2026, the National Credit Union Administration (NCUA) issued a final rule on 12 CFR Part 749 – Vital Records Preservation Program. The…

Alyssa Pugh Published Date: Jun 11, 2026 Vendor Management, Security and Compliance, Incident Management, Financial Institutions, Phishing

CSBS Cyber Hygiene Fundamentals: A Practical Guide for Community Financial Institutions

"Basic cyber hygiene prevents 98% of cyberattacks." That's a quote from former CISA Director Jen Easterly, and it's the foundation of a guide…

Savannah Richardson Published Date: May 19, 2026 Vendor Management, Credit Unions, Security and Compliance, Financial Institutions, Banks, Artificial Intelligence

Vibe Coding and AI Citizen Developers: Risk Management Tips for Banks and Credit Unions

Alyssa Pugh

Savannah Richardson Published Date: May 14, 2026 Vendor Management, Artificial Intelligence

What are the Regulators Saying About Artificial Intelligence (AI)? (May 2026 Update)

Federal banking regulators are increasingly approaching AI with cautious optimism. Here's what community banks and credit unions need to know in 2026.

Alyssa Pugh Published Date: Apr 22, 2025 Vendor Management, Risk Assessments, Policy Management

Riding into the Sunset: A Community Financial Institution’s Guide to IT Asset End-of-Life

Everyone loves a good sunset……. when it's out in nature. 🌄

Savannah Richardson Published Date: Apr 08, 2025 Vendor Management, Artificial Intelligence

How to Write an AI Policy

As artificial intelligence (AI) becomes more integrated with business operations, it's increasingly important to develop clear policies to manage…

Alyssa Pugh Published Date: Dec 03, 2024 Vendor Management

Model Risk Management FAQs for Community Banks & Credit Unions

Model risk management is an evolving topic for community banks and credit unions. While models have been around for a long time, their prevalence in…

Alyssa Pugh Published Date: Aug 08, 2024 Vendor Management

A Vendor Manager’s Guide to Service Level Agreements (SLAs)