The Bedel Security Blog

Information security expertise exclusively for you.

Sign Up Today

Bank executive reading the Bedel Security blog on her desktop.

Regulatory Compliance

Bedel Security graphic about how community banks should risk-rate AI use cases, featuring a bank committee collaborating and reviewing documents during a meeting.

4 min read

How Should Community Banks Risk-Rate AI Use Cases?

Cory Poupore: Oct 16, 2026

How Should Banks Assess AI Use Case Risk? Community banks should risk-rate AI use cases by evaluating four key factors: consumer impact, human...

Community Banking Regulatory Compliance AI Governance AI Risk Management CSBS AI use case risk tiering

Bedel Security graphic about 2026 proposed third-party risk management guidance for banks and credit unions, featuring a banker reviewing documents.

4 min read

What the 2026 Proposed Third-Party Risk Management Guidance Means for Banks and Credit Unions

Trisha Durkin: Sep 18, 2026

On September 11, 2026, the Federal Reserve, FDIC, OCC, and NCUA jointly released proposed guidance that could reshape how banks and credit unions...

Credit Unions Due Diligence Community Banking Third-Party Risk Management Regulatory Compliance

Bedel Security graphic about strong cybersecurity governance at a community bank, featuring banking professionals in a leadership meeting.

2 min read

What Strong Cybersecurity Governance Looks Like At a Community Bank

Brian Petzold: Sep 4, 2026

There is no such thing as a perfect cybersecurity program, as the threat landscape changes so quickly that new attack methods can appear overnight....

Information Security Program Governance Community Banking Third-Party Risk Management Regulatory Compliance NIST-CSF

Bedel Security graphic about the difference between IT and information security, featuring a banker working on a laptop.

4 min read

IT vs. Information Security: What's the Difference?

Errica Padgett: Aug 28, 2026

When examiners, auditors, or the Board ask who is responsible for information security, the answer should not simply be “IT.” For many financial...

Information Security Program Governance vCISO Virtual CISO Outsourced CISO FFIEC Financial Institution Community Banking Regulatory Compliance

Graphic highlighting FDIC guidance on implementing cybersecurity fundamentals for financial institutions.

3 min read

The FDIC Is Pointing Banks Back to Cybersecurity Fundamentals.

Trisha Durkin: Jul 10, 2026

Artificial intelligence is changing cybersecurity. Vulnerabilities can be identified faster, exploits can be developed more quickly, and attackers...

Information Security Program FDIC Risk Management Compliance Regulatory Compliance

Bedel Security Friday5 graphic asking what’s in your bank's cybersecurity policy.

2 min read

What’s In Your Information Security Policy?

John Freerksen: May 15, 2026

A bank’s information security policy is one of the few documents that directly connects technical risk to executive accountability. Most policies...

Policy Governance Incident Response FFIEC Risk Management Compliance Third-Party Risk Management Regulatory Compliance

Executives discussing IT and cybersecurity compliance in changing regulatory environment.

2 min read

Changing Regulatory Landscape

Chris Bedel: Feb 20, 2026

Changing Regulatory Landscape: What “Material Financial Risk” Means for IT and Cybersecurity Late in 2025, all three federal banking regulatory...

Regulation Exam Multi-factor Authentication Risk Management Third-Party Risk Management Regulatory Compliance

2 min read

Case Study: First National Bank of Pulaski

Cade Williams: Jan 8, 2026

Introduction Community banks face a unique challenge: balancing compliance demands with limited resources. As regulators place greater emphasis on...

Risk Assessment vCISO Virtual CISO Banks Community Banking Bedel Security Third-Party Risk Management Regulatory Compliance Regulators IS Program

1 min read

Vendor Data Sharing: Why “Need to Know” Is a Must for Financial Institutions

Errica Padgett: Nov 14, 2025

Vendors play a crucial role in helping financial institutions deliver modern, efficient, and client-focused services. But with every data exchange...

Information Security Program Vendor Management GLBA Due Diligence Third-Party Risk Management Regulatory Compliance Data Protection

2 min read

Measuring Cybersecurity That Matters: KRIs Every Financial Institution Should Track

John Freerksen: Oct 24, 2025

For regulators, auditors, and your board, good cybersecurity isn’t just about having controls in place—it’s about proving they work. That’s where...

Information Security Program Incident Response Credit Unions Risk Management Community Banking KRI Key Risk Indicators Regulatory Compliance NIST-CSF

1 2 Next