Newsletter

The Coalfire Standard - Past Issues

The Coalfire Standard - January 2013
In this Issue
Feature Article:
How to talk to your Board about IT Security –Can they handle the truth?
Industry Update: 
The Supervision of Technology Service Providers - the FFIEC’s latest Booklet
Best Practices:
Flu shots and pen testing: Are they really optional?
C-Note:
The Convergence of Mobile, P2PE and the Cloud

The Coalfire Standard - August 2012
In this Issue
Featured Article:
Employees speak up about mobile devices in the office - and what it means for
BYOD security
Industry Update: 
What is FedRAMP and how will it affect me? Frequently Asked Questions
Best Practices:
Tips for Successfully Working with Your Auditor – A Win-Win Solution
C-Note:
Self-Certification for IT Compliance in a Cloud Environment

The Coalfire Standard - June 2012
In this Issue
Featured Article:
Maintaining IT Compliance in the Post Firewall Era
Industry Update: 
Cloud Service Providers – Which 3PAO is for you?
Best Practices:
Proof of a Job Well Done
C-Note:
Lessons Learned from LinkedIn

The Coalfire Standard - May 2012
In this Issue
Featured Article:
SEC Cyber Risk Guidance
Industry Update: 
FISMA and now FedRAMP - What's the Difference
Best Practices:
Cybersecurity: A Strategy for Securing Critical Infrastructure from Cyber Attacks
C-Note:
The Changing Risk Profile in a Mobile Computing Environment

The Coalfire Standard - March 2012
In this Issue
Feature Article:
Bring Your Own Device (BYOD) to Work
Industry Update: 
The 5 Elements of an Effective HIPAA Audit Preperation Program
Best Practices:
Top 10 Cloud Security Tips
C-note:
Cyber Defenders - The Next Generation

The Coalfire Standard - January 2012
In this Issue
Feature Article:
2012 Information Security Compliance Predictions
Industry Update: 
Increased Compliance in Healthcare - HIPAA, and now, the FDA
Best Practices:
Vendor Management in the Clouds
C-note:
Observations from the NRF Show – Cool Stuff and Advanced Technology

The Coalfire Standard - December 2011
In this Issue
Feature Article:
On the Way to the Cloud
Industry Update: 
Managing User Authentication in Healthcare
Best Practices:
Access Control – Use it or Lose It
C-note:
What is Your Risk Assessment Worth?

The Coalfire Standard - October 2011
In this Issue
Feature Article:
The Modern Data Destruction Standard
Industry Update: 
Why Has the HIPAA Security Rule Not Been a Dazzling Success?
Best Practices:
Managing Mobile Device Security in the Workplace
C-note:
A Cyber Security Manifesto

The Coalfire Standard - August 2011
In this Issue
Feature Article:
Vendor Management for Healthcare
Industry Update: 
New FFIEC Guidance – The Need for Improved Data Security
Best Practices:
Be Prepared with a Good Security Incident Response Plan
C-note:
Are We Entering a Period of Cyber War?

The Coalfire Standard - June 2011
In this Issue
Feature Article:
How a solid security program can safeguard your data
Industry Update: 
We are from the Government. We're here to help.
Best Practices:
Rethink Risk, Rethink Technology
C-note:
Federal Cyber Security Legislation in the Works

The Coalfire Standard - May 2011
In this Issue
Feature Article:
Botnet 2011
Industry Update: 
HIPAA/HITECH - Audits, Notifications, and Penalties
Best Practices:
Best Practices: Protecting Telephone-based Payment Card Data
C-note:
C-Note: Cyber Security

The Coalfire Standard - March 2011
In this Issue
Feature Article:
The New Authoritative Guidance for Reporting on Service Organizations
Industry Update: 
The Case for IT Audit Cost Containment
Best Practices:
Mobile Application Security - The New Frontier
C-note:
A Thank You

The Coalfire Standard - Jan 2011
In this Issue
Feature Article:
Point-to-Point Encryption
Industry Update: 
Vendor Management – The Devil’s in the Details
Best Practices:
Knock, Knock...Do You Know Who’s There?
C-note:
Let’s Welcome the Electric Power Industry

The Coalfire Standard - Dec 2010
In this Issue
Feature Article:
Compliance and the Cloud
Industry Update: 
PCI DSS 2.0 Update—Evolutionary, Not Revolutionary
Best Practices:
Going Beyond Compliance
C-note:
IT Compliance Matures into Risk Management