The Bedel Security Blog

Information security expertise exclusively for you.

Sign Up Today

Bank executive reading the Bedel Security blog on her desktop.

Regulatory Compliance

Bedel Security graphic about 2026 proposed third-party risk management guidance for banks and credit unions, featuring a banker reviewing documents.

4 min read

What the 2026 Proposed Third-Party Risk Management Guidance Means for Banks and Credit Unions

Trisha Durkin: Sep 18, 2026

On September 11, 2026, the Federal Reserve, FDIC, OCC, and NCUA jointly released proposed guidance that could reshape how banks and credit unions...

Bedel Security graphic about strong cybersecurity governance at a community bank, featuring banking professionals in a leadership meeting.

2 min read

What Strong Cybersecurity Governance Looks Like At a Community Bank

Brian Petzold: Sep 4, 2026

There is no such thing as a perfect cybersecurity program, as the threat landscape changes so quickly that new attack methods can appear overnight....

Information Security Program Governance Community Banking Third-Party Risk Management Regulatory Compliance NIST-CSF

Bedel Security graphic about the difference between IT and information security, featuring a banker working on a laptop.

4 min read

IT vs. Information Security: What's the Difference?

Errica Padgett: Aug 28, 2026

When examiners, auditors, or the Board ask who is responsible for information security, the answer should not simply be “IT.” For many financial...

Information Security Program Governance vCISO Virtual CISO Outsourced CISO FFIEC Financial Institution Community Banking Regulatory Compliance

Graphic highlighting FDIC guidance on implementing cybersecurity fundamentals for financial institutions.

3 min read

The FDIC Is Pointing Banks Back to Cybersecurity Fundamentals.

Trisha Durkin: Jul 10, 2026

Artificial intelligence is changing cybersecurity. Vulnerabilities can be identified faster, exploits can be developed more quickly, and attackers...

Information Security Program FDIC Risk Management Compliance Regulatory Compliance

Bedel Security Friday5 graphic asking what’s in your bank's cybersecurity policy.

2 min read

What’s In Your Policy?

John Freerksen: May 15, 2026

A bank’s information security policy is one of the few documents that directly connects technical risk to executive accountability. Most policies...

Policy Governance Incident Response FFIEC Risk Management Compliance Third-Party Risk Management Regulatory Compliance

Executives discussing IT and cybersecurity compliance in changing regulatory environment.

2 min read

Changing Regulatory Landscape

Chris Bedel: Feb 20, 2026

Changing Regulatory Landscape: What “Material Financial Risk” Means for IT and Cybersecurity Late in 2025, all three federal banking regulatory...

Regulation Exam Multi-factor Authentication Risk Management Third-Party Risk Management Regulatory Compliance

2 min read

Case Study: First National Bank of Pulaski

Cade Williams: Jan 8, 2026

Introduction Community banks face a unique challenge: balancing compliance demands with limited resources. As regulators place greater emphasis on...

Risk Assessment vCISO Virtual CISO Banks Community Banking Bedel Security Third-Party Risk Management Regulatory Compliance Regulators IS Program

2 min read

How to Approach Third Party Reviews

Brian Petzold: Nov 21, 2025

One of the most important processes in cybersecurity for financial institutions today is third-party due diligence. However, it is also one of the...

Information Security Program Vendor Management Risk Assessment Third-Party Due Diligence Regulatory Compliance

1 min read

Vendor Data Sharing: Why “Need to Know” Is a Must for Financial Institutions

Errica Padgett: Nov 14, 2025

Vendors play a crucial role in helping financial institutions deliver modern, efficient, and client-focused services. But with every data exchange...

Information Security Program Vendor Management GLBA Due Diligence Third-Party Risk Management Regulatory Compliance Data Protection

2 min read

Measuring Cybersecurity That Matters: KRIs Every Financial Institution Should Track

John Freerksen: Oct 24, 2025

For regulators, auditors, and your board, good cybersecurity isn’t just about having controls in place—it’s about proving they work. That’s where...

Information Security Program Incident Response Credit Unions Risk Management Community Banking KRI Key Risk Indicators Regulatory Compliance NIST-CSF

1 2 Next