Information Security Policies

Use Tandem Policies to access a complete list of 40+ information security policy templates, created by security experts and tailored for your institution through a multiple-choice questionnaire.

standard (27)

Enterprise-Wide Policies

In addition to Information Security policies, create your own custom categories (e.g. Lending, Operations, Human Resources, etc.).

While policy language is not provided for custom categories, you can add your existing language and use Tandem's tracking features.

standard (28)

Tracking & Oversight

Never lose track of a single change. Every time a policy is saved, a version is stored in Tandem for comparing over time and reporting to the board.

Use the revision logs and meeting agendas to make maintenance easy.

standard (29)
standard (1)-1
 

Meeting Agendas

Document how, when and who will verify each policy. Then let Tandem generate meeting agendas for each team.

These meeting agendas will always accurately reflect your policies and help ensure items don't fall through the cracks.

standard (31)
 

Multi-User Access

Control who has access to your policies and monitor the changes they make.

Use category specific access roles to ensure users can customize their own policy categories without being able to change other policies.

standard (32)
 

Acceptable Use Policy Training

Enroll employees in an online AUP training course, generated from your policy language.

The online training options allow digital tracking of employees' acceptance of the institution's Acceptable Use Policy.

787px (6)
 

Downloads

Effortlessly generate consistent and professional documents on the fly to share with your executive team, board of directors, auditors, and examiners.

These customizable documents are available in Microsoft Word and Adobe PDF formats.

Additional Features

  • Maintain a complete revision history of policies
  • Create a revision/approval log
  • Use global reporting to generate standardized documents
  • Create an unlimited number of policies and categories
  • Create tasks, assign them to users, and monitor their status
  • Identify gaps with reports
  • Add as many user and administrator accounts as needed

Are you interested in

Policy Management Software?

Watch a Demo
Request a Quote

"Thanks for all that you folks do to support and improve the software. We’ve been impressed with Tandem since day one; especially the responsiveness of the support and development teams with our needs and requests for new features. Thanks for all you do."

"We are so happy to have a partner like Tandem. Your products help our community bank compete with larger, regional and national banks without the expense of a huge staff."

Chris Manus
Information Technology Manager

Citizens Bank in Carthage, TN

"If honesty and integrity are values that resonate when selecting an Information Security technology partner, then Tandem software is for your institution. Every employee on the Tandem team is committed to sustaining tools for your bank to build a custom program compliant with current regulatory guidance."

Jack Clarke
VP of Operations

First American Bank in Artesia, NM

"The Tandem Business Continuity Planning software has streamlined how we manage business continuity for our bank. Before Tandem, we lost files and had to update and make changes to a Word document. This software has helped us focus on the important aspects of business continuity and made it easier to update, train, and report to our Board of Directors."

Brandi Shiflett, EVP
Senior Operations Officer

North Dallas Bank & Trust Co in Dallas, TX

"Tandem’s Business Continuity Planning software is a strong program that integrates well with Tandem’s Vendor Management software. It provides good reports for our Board of Directors and Management. It is easy to update, and I am able to access it from anywhere… even on my phone."

James Tipton, EVP
Enterprise Risk Manager

North Dallas Bank & Trust Co. in Dallas, TX

"Tandem's Business Continuity Planning software has given us the direction we needed to establish good processes for our organization."

Ron Dittmann
VP of IT

Texas Trust Credit Union in Mansfield, TX

"Tandem is an excellent product that I highly recommend. It has helped us to fill the gaps regarding our BCP and Risk Assessments. It was a major help with our last NCUA exam with the addition of the ACET request list. I have nothing but great things to say about Tandem!"

Crystal Woodward-Smith
Compliance Officer

Hope Federal Credit Union in Jackson, MS

"First, I want to thank Tandem for being such a great partner of ours. We are extremely grateful for the tools you have provided. Particularly, your BCP program and the employee alert system. As of right now that is our main communication system for most of our employees."

"Tandem is extremely easy to use. I just started in the system (in earnest) and was able to quickly navigate through the steps. It’s very logical, comprehensive and I’m hopeful it will result in easier reports and exams. It’s a phenomenal option for a bank our size."

Robin Banell
VP of Compliance, Internal Control Officer

F & M Bank in Edmond, OK

"Tandem Vendor Management has made the process for collecting and tracking documents a breeze. The Vendor Management system is easy to use, yet quite powerful software. The software has saved us time from old spreadsheets and a manual vendor review process. I would highly recommend any organization to this system."

Kyle Moreland
Compliance Officer

Johnson City Bank in Johnson City, TX

Frequently Asked Questions

Does Tandem provide policy templates?

Yes. Tandem provides more than 40 common information security policy templates.

The suggested policies are custom to your organization from the start, because their wording is generated from a multiple-choice questionnaire you complete. Each policy includes suggested wording, verification items, related threats and regulatory guidance.

The list of suggested policies includes:

  • Change Management Policy
  • Core Application Policy
  • Digital Banking Policy
  • Incident Management Policy
  • Intrusion Detection and Prevention Policy
  • IT Asset Management Policy
  • Mobile Device Management (MDM) Policy
  • Remote Access Policy
  • Social Media Policy
  • System Development Life Cycle (SDLC) Policy
  • User Authentication Policy
  • Vendor Management Policy
  • And many more

Are the suggested information security policies mapped to guidance and standards?

Yes. The suggested information security policies are mapped to regulatory guidance for financial institutions (i.e., FFIEC, FDIC, OCC, FRB, and NCUA).

Additionally, Tandem allows you to optionally include references to the following standards:

  • COBIT 2019
  • NIST SP800-53
  • PCI DSS vs. 4.0
  • CIS Controls 8.1

Is there instructional documentation to help me manage my policies?

Yes. Tandem offers a Knowledge Base with articles written by Tandem experts.

While you navigate the product you will also find help tips along the way.

Is there someone at Tandem who can help me build my policies?

Yes. Tandem Support is available 8:00 AM – 5:00 PM (CT), Monday through Friday to answer your questions about Tandem application features.

For help with the contents of your information security policies, check out our partners who can provide information security policy consulting.

You are also invited to attend our annual KEYS conference to connect with other users and learn from Tandem experts.

What training options are available?

Tandem is pleased to offer complimentary training webinars each month for our customers. These webinars are recorded and available on-demand.

A Knowledge Base is available with articles to help you learn about Tandem. You can stay up-to-date on our latest features by subscribing to our Software Update emails.

Product training is also available by request for an additional fee.

Will my data be secure?

Yes. Tandem maintains high marks through the following testing: SSAE 18 SOC 1 Type 2, internal audits and assessments, quarterly penetration tests.

Security controls include:

  • Secure data transmission between your browser and your servers
  • Data encrypted at rest using AES-256
  • User passwords are hashed and salted
  • Datacenter protected by firewall and intrusion detection/prevention systems (IDS/IPS)
  • Redundant internet connections
  • Multifactor authentication options
  • Single Sign On (SSO) integration using SAML 2.0
  • IP address restrictions
  • User activity log
  • User access roles/restrictions

How is Tandem installed and updated?

Tandem products are delivered via the internet as Software-as-a-Service (SaaS) applications. Tandem can be accessed from any device with a modern web browser. No software installation or special equipment is required.

New features and updates are included with your annual subscription and are automatically available. Each new feature is documented in our Software Updates blog.

Does this product integrate with other Tandem products?

Yes. Tandem Policies integrate with the Tandem Information Security Risk Assessment product.

By using both modules, policies are easily mapped to threats to remain consistent with risk assessment requirements.

All Tandem products are available under the same secure website.

Can I manage accounts for multiple companies?

Yes. With a single login you can manage several companies' policies (requires a subscription for each company).

Tandem Products

Audit Management
Business Continuity Planning
Compliance Management
Cybersecurity Assessment
Identity Theft Prevention
Incident Management
Internet Banking Security
Phishing
Policies
Risk Assessment
Vendor Management

Ready to see what Tandem can do for you?

Watch a Demo