The Bedel Security Blog | Andrew Hernandez

Bedel Security graphic about how AI and professional experience combine to enhance creativity and decision-making.

5 min read

AI, Experience, and the Return of Creativity

Andrew Hernandez: Aug 7, 2026

AI Artificial Intelligence

2 min read

Scams Aren’t Always Digital

Andrew Hernandez: May 29, 2026

Scams Aren’t Always Digital: Why Diligence Still Matters in a Physical World When people hear the word “scam,” they often picture phishing emails,...

Scams Phishing Employee Training and Awareness Fraud Social Engineering

Bedel Security Friday5 graphic on identity as the new perimeter in cybersecurity.

2 min read

Identity Is the New Perimeter

Andrew Hernandez: Mar 27, 2026

For years, cybersecurity strategies were built around a clear boundary: the network perimeter. Firewalls, intrusion detection systems, and network...

Governance Access & Authentication Zero Trust NIST-CSF Identity and Access Management

Team of professionals working at computers in a modern office, representing internal cybersecurity risk and governance for community banks

3 min read

Internal vs. External Cyber Threats

Andrew Hernandez: Jan 23, 2026

Internal vs. External Cyber Threats: Why Internal Risk Defines Cybersecurity Outcomes for Community Banks

Threats Governance Access Reviews Zero Trust NIST-CSF Insider Threats

4 min read

MFA Prompt Bombing: When Multi-Factor Authentication Becomes a Nuisance — and a Risk

Andrew Hernandez: Nov 7, 2025

Multi-factor authentication (MFA) is widely considered one of the best affordable controls for preventing account takeover. But like every security...

Threats Incident Response MFA Multi-factor Authentication User Testing and Training

2 min read

Cracking Codes and Crushing Rocks: What Geology Can Teach Us About Cryptography

Andrew Hernandez: Sep 12, 2025

At first glance, geology and cryptography may seem worlds apart—one is the study of rocks, layers, and the passage of deep time; the other, the...

Threats Information Security Program Cybersecurity Encryption Cryptography

2 min read

From Compliance to Confidence

Andrew Hernandez: May 16, 2025

Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...

Risk Assessment Cybersecurity Risk Management Regulatory Compliance NIST-CSF

5 min read

AI Model Risk Management in Financial Institutions

Andrew Hernandez: Mar 20, 2025

Today we’ll discuss our newest and perhaps most ubiquitous buzzword: AI (Artificial Intelligence). Identifying and mitigating risks of AI are...

Information Security Program AI Artificial Intelligence Risk Management DLP Regulatory Compliance

2 min read

Network Segmentation: How Much Is Enough?

Andrew Hernandez: Jan 30, 2025

Network segmentation is one of those terms that gets thrown around a lot, like the principle of least privilege and role-based access, as if it was...

Risk Management Network Network Segmentation Monitoring & Oversight