Posts by:
On June 26, 2023, the Office of the Comptroller of the Currency (OCC) published Bulletin 2023-22: Cybersecurity Supervision Work Program. Let's look at five things we think community banks should know about the Cybersecurity Supervision Work Program (CSW) exam procedures.
Note: This article was updated on January 13, 2025. See the update log at the bottom of the article.
On June 6, 2023, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC) published new Interagency Guidance on Third-Party Relationships: Risk Management. Here are eight things community banks need to know about it.
Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a Business Continuity Plan or a BCP.
On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie Mac's information security and privacy requirements. Here's an introduction to the requirements, as well as a summary of what's new, what's changed, and what you may need to do about it.
"Quantum computing" started as a theory decades ago. Today it is becoming a reality with companies like IBM launching powerful quantum computers and the United States federal government issuing laws and guidelines on the topic.
The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated Information Security Examination procedures tailored to institutions of varying size and complexity. Examiners will use these new procedures in 2023."
Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will tell you what you can expect in your 2023 exam and take you through a bit of the history of each acronym.
At Tandem, we regularly receive the question, "What's the difference between policies, standards, controls, and procedures?" This question is foundational to being able to understand how to best write an information security policy. By defining what each of these elements are (and are not), communication can happen more clearly, which is why you try to have these things in the first place.
"If you don't know where you are going, any road will take you there." – The Cheshire Cat, Alice in Wonderland by Lewis Carroll