third-party risk management

How to Draft and Enforce a Cybersecurity Addendum in Vendor Contracts Under the New SEC Cyber Disclosure Rules (2026)

Business Security and Risk Management / Jack Gilbert

New SEC cybersecurity disclosure rules require public companies to report “material” incidents within 4 business days—making vendor-caused breaches a board-level timing risk. Most incidents start with third parties, so contracts now function as your compliance clock and evidence file. This article shows how to draft, negotiate, and enforce a cybersecurity addendum that supports SEC disclosures, […]

How to Draft and Enforce a Cybersecurity Addendum in Vendor Contracts Under the New SEC Cyber Disclosure Rules (2026) Read More »

How to Prepare for a 2026 FDIC Bank Examination: A Step-by-Step Compliance Checklist for Community Banks

Community banks typically receive FDIC safety-and-soundness examinations every 12–18 months, and most findings trace back to documentation gaps and weak internal controls. With 2026 exams likely to emphasize governance, third-party risk, liquidity, and IT/cyber resilience, preparation must start well before the first-day request list arrives. This guide provides a step-by-step compliance checklist, practical documentation tips,