The Bedel Security Blog | Errica Padgett

Bedel Security graphic about the difference between IT and information security, featuring a banker working on a laptop.

4 min read

IT vs. Information Security: What's the Difference?

Errica Padgett: Aug 28, 2026

When examiners, auditors, or the Board ask who is responsible for information security, the answer should not simply be “IT.” For many financial institutions, IT and Information Security work closely together, and in some cases the same individual...

Information Security Program Governance vCISO Virtual CISO Outsourced CISO FFIEC Financial Institution Community Banking Regulatory Compliance

Graphic highlighting responsible AI adoption and governance in financial institutions.

3 min read

Artificial Intelligence in Banking: Innovation Without Losing Control

Errica Padgett: Jun 19, 2026

Artificial Intelligence (AI) has quickly become a daily business tool. Employees of financial institutions are using AI-powered assistants to draft...

Information Security Program AI Artificial Intelligence Compliance Third-Party Risk Management AI Governance AI Risk Management

Bedel Security Friday5 graphic on third-party risk and SaaS cybersecurity challenges.

2 min read

The Third-Party Risk You Can’t See

Errica Padgett: Apr 3, 2026

Financial institutions have long understood the importance of third-party risk management. Vendor due diligence, contract reviews, and ongoing...

Information Security Program Third-Party Risk Management Data Protection

Audience attending a cybersecurity presentation, illustrating why cyber hygiene and CSBS Cyber Hygiene Fundamentals matter for financial institutions.

1 min read

Cyber Hygiene Isn’t Optional

Errica Padgett: Jan 30, 2026

Why the CSBS Cyber Hygiene Fundamentals Matter Now

Information Security Program Governance Cybersecurity Third-Party Risk Management cyber hygiene

1 min read

Vendor Data Sharing: Why “Need to Know” Is a Must for Financial Institutions

Errica Padgett: Nov 14, 2025

Vendors play a crucial role in helping financial institutions deliver modern, efficient, and client-focused services. But with every data exchange...

Information Security Program Vendor Management GLBA Due Diligence Third-Party Risk Management Regulatory Compliance Data Protection

1 min read

A Strong Defense Wins Championships—and Protects Your Data

Errica Padgett: Sep 19, 2025

In football, it’s often said that defense wins championships. The same principle applies to information security: the strength of your defensive...

Threats Information Security Program Incident Response Risk Management NIST-CSF Data Protection

1 min read

The Rising Threat of Deepfake Technology in Cybersecurity

Errica Padgett: Aug 15, 2025

In recent years, cybercriminals have expanded their toolkit beyond phishing emails and malware to include a newer, more sinister threat—deepfake...

Threats Incident Response Cybersecurity Cybersecurity Awareness Training

1 min read

Phishing, But Make It AI: Why You’re More Likely to Click — And What to Do About It

Errica Padgett: May 23, 2025

Remember the phishing emails of yesteryear? Misspelled words, weird formatting, maybe a Nigerian prince or two?

vCISO AI Cybersecurity Phishing

2 min read

Third-Party Risk Management: Properly Rating Inherent Risk

Errica Padgett: Mar 28, 2025

Whether it’s outsourcing core functions or leveraging specialized technology, working with third parties can introduce significant risks. To mitigate...

Compliance Third-Party Risk Management Inherent Risk

1 min read

The Quantum Threat: Preparing for a Post-Quantum Cybersecurity Landscape

Errica Padgett: Feb 7, 2025

The quantum computing era is quickly approaching, and the capabilities of these powerful machines promise to revolutionize various industries. This...

Threats Encryption Quantum computing

1 2 Next