Post Archive
Tags
2.0 3.0 Agency Assessment assessments audit Breach BYOD cloud Compliance Cyber cybersecurity Data DRG DSS e-banking encryption engineering federal FedRAMP FISMA forensics government GRC hacker hacking Health Healthcare HIMSS HIPAA HITECH IT labs legislation merchant mobile Navis News NRF P2PE PA-DSS password passwords Payments PCI penetration pentesting policy Privacy program Retail Risk RSA security security. Self-Assessment social State test Testing Virtualization web

The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique IT GRC issues that impact the industries we serve, including Retail, Financial Services, Healthcare, Higher Education, Software, Government and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.

  • FISMA vs FedRAMP: Compliance requirement differences

    May 03, 2012, Tom McAndrew, EVP, Coalfire Federal

    Tom McAndrew

    Organizations that work with, or want to work with, government agencies must manage to government compliance regulations. Almost everyone is familiar with the FISMA compliance standards, but with the announcement of FedRAMP, which provides a structure to manage compliance requirements for "a cloud first initiative" for government agencies and organizations working with them, there’s a new set of compliance requirements to adhere to. Or is there? Read More

    Posted in: assessments, compliance, federal, FedRAMP, FISMA | 0 Comments

  • Formalized IT Security Policy Now Required for Government Prime and Sub-contractors

    January 20, 2012, Alan Ferguson, Executive VP, Sales and Marketing, Co-founder

    Alan Ferguson

    This month the GSA announced an IT security mandate for government prime- and sub-contractors that requires them to have a formalized IT security plan that includes periodic audits.  Many government sub-contractors, large and small, will benefit from a third-party compliance program review so they can meet the intent of the rule but more importantly, they can promote an IT risk audit as a benefit to their customer base in their business development efforts.  There are a large number of sub-contractors, including IT service providers, that will need to comply with this new mandate. Read More

    Posted in: audit, cloud, compliance, federal, FedRAMP, FISMA, IT, program | 0 Comments