Post Archive
Tags
2.0 3.0 Agency Assessment assessments audit Breach BYOD cloud Compliance Cyber cybersecurity Data DRG DSS e-banking encryption engineering federal FedRAMP FISMA forensics government GRC hacker hacking Health Healthcare HIMSS HIPAA HITECH IT labs legislation merchant mobile Navis News NRF P2PE PA-DSS password passwords Payments PCI penetration pentesting policy Privacy program Retail Risk RSA security security. Self-Assessment social State test Testing Virtualization web

The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique IT GRC issues that impact the industries we serve, including Retail, Financial Services, Healthcare, Higher Education, Software, Government and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.

  • What is Your Risk Assessment Worth?

    December 08, 2011, John Rostern, Managing Director of New York Office

    John Rostern

    A risk assessment provides your organization with a tool to determine how, where and how much to invest in controls and security over technology.  It also serves to document the risk acceptance policy of your organization as the acceptable level of risk dictates the level of controls to be implemented.  It is also a requisite part of legal and regulatory compliance for Sarbanes-Oxley, HIPAA and PCI, among others.  Read More

    Posted in: Assessment, Risk | 0 Comments

  • Trust the ‘Cloud’ (just make sure you have it examined first)

    April 26, 2011, Tom McAndrew, EVP, Coalfire Federal

    Tom McAndrew

    In the wake of Amazon’s Web Service disruption over the past few days we think it is important to look at the case a little closer. Read More

    Posted in: assessment, audit, Cloud | 1 Comments

  • Compliance and the Cloud

    March 14, 2011, Tom McAndrew, EVP, Coalfire Federal

    Tom McAndrew

    “The Cloud” is a hot topic right now. Yet most people can’t even define what “the cloud” really is. As I talk to more companies, who are considering the move, they all have two main concerns: security and compliance. Of course, security and compliance are key when it comes to cloud computing, but the questions you really need to be asking is not, “Will I be secure and compliant if I move to the cloud?” but rather, “What do I need to do to be secure and compliant when I move to the cloud?” Read More

    Posted in: assessment, audit, Cloud, compliance, security | 0 Comments