The Coalfire Blog
Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique IT GRC issues that impact the industries we serve, including Retail, Financial Services, Healthcare, Higher Education, Software, Government and Utilities.
The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.
What is Your Risk Assessment Worth?
December 08, 2011, John Rostern, Managing Director of New York Office
A risk assessment provides your organization with a tool to determine how, where and how much to invest in controls and security over technology. It also serves to document the risk acceptance policy of your organization as the acceptable level of risk dictates the level of controls to be implemented. It is also a requisite part of legal and regulatory compliance for Sarbanes-Oxley, HIPAA and PCI, among others. Read More
Posted in: Assessment, Risk | 0 Comments
Trust the ‘Cloud’ (just make sure you have it examined first)
April 26, 2011, Tom McAndrew, EVP, Coalfire Federal
In the wake of Amazon’s Web Service disruption over the past few days we think it is important to look at the case a little closer. Read More
Posted in: assessment, audit, Cloud | 1 Comments
Compliance and the Cloud
March 14, 2011, Tom McAndrew, EVP, Coalfire Federal
“The Cloud” is a hot topic right now. Yet most people can’t even define what “the cloud” really is. As I talk to more companies, who are considering the move, they all have two main concerns: security and compliance. Of course, security and compliance are key when it comes to cloud computing, but the questions you really need to be asking is not, “Will I be secure and compliant if I move to the cloud?” but rather, “What do I need to do to be secure and compliant when I move to the cloud?” Read More
Posted in: assessment, audit, Cloud, compliance, security | 0 Comments