The Bedel Security Blog

Information security expertise exclusively for you.

Sign Up Today

Bank executive reading the Bedel Security blog on her desktop.

Governance

2 min read

What Strong Cybersecurity Governance Looks Like At a Community Bank

Brian Petzold: Sep 4, 2026

There is no such thing as a perfect cybersecurity program, as the threat landscape changes so quickly that new attack methods can appear overnight....

Bedel Security graphic about the difference between IT and information security, featuring a banker working on a laptop.

4 min read

IT vs. Information Security: What's the Difference?

Errica Padgett: Aug 28, 2026

When examiners, auditors, or the Board ask who is responsible for information security, the answer should not simply be “IT.” For many financial...

Information Security Program Governance vCISO Virtual CISO Outsourced CISO FFIEC Financial Institution Community Banking Regulatory Compliance

Bedel Security Friday5 graphic asking what’s in your bank's cybersecurity policy.

2 min read

What’s In Your Policy?

John Freerksen: May 15, 2026

A bank’s information security policy is one of the few documents that directly connects technical risk to executive accountability. Most policies...

Policy Governance Incident Response FFIEC Risk Management Compliance Third-Party Risk Management Regulatory Compliance

Bedel Security Friday5 graphic on challenges moving from FFIEC CAT to NIST CSF.

3 min read

Why These NIST CSF Outcomes Can Be Challenging

Trisha Durkin: May 8, 2026

Why These NIST CSF Outcomes Can Be Challenging When Moving from the FFIEC CAT For more than a decade, the Federal Financial Institutions Examination...

Governance Cybersecurity Assessment Tool Cybersecurity Third-Party Risk Management NIST-CSF CAT Replacement CySPOT® CSF+ Supply Chain Risk

Bedel Security Friday5 graphic on identity as the new perimeter in cybersecurity.

2 min read

Identity Is the New Perimeter

Andrew Hernandez: Mar 27, 2026

For years, cybersecurity strategies were built around a clear boundary: the network perimeter. Firewalls, intrusion detection systems, and network...

Governance Access & Authentication Zero Trust NIST-CSF Identity and Access Management

4 min read

Building a Stronger Phishing Resilience Culture

Jordan Rosiak: Mar 20, 2026

Phishing simulations are nearly universal in community banking. Regulators expect them. Auditors ask about them. Boards see the metrics. Yet despite...

Governance Risk Management Phishing Community Banking Employee Training and Awareness Cybersecurity Awareness Training

2 min read

Understanding AI Bias

John Freerksen: Mar 6, 2026

Artificial intelligence is transforming financial services—from credit decisions to fraud detection and hiring. However, because AI systems are built...

Governance AI Artificial Intelligence Risk Management Compliance