The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, Retail, Financial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.

Has Your O365 Account Been Hacked?

January 16, 2018, Robert Meekins, Director, Forensics, Coalfire

In the past six months, Coalfire has seen an increase in businesses receiving fraudulent emails from legitimate client accounts with fraudulent invoice attachments. In several cases, the recipient paid the invoices not realizing they were fraudulent. The losses have ranged between thousands and hundreds of thousands of dollars. When the business investigated, they found that the mailbox associated with the sender’s account did not contain the sent emails. Moreover, the authorized user claims they never sent the email.
Read more
The Spectre of Chips on Meltdown

January 05, 2018, Victor Teissler, Security Associate, Coalfire

The news is rife with emerging details of Intel and other chip vulnerabilities and the hardware bugs that can potentially exploit them. While details are still developing and will likely continue to be uncovered in the days, weeks, and even months ahead, we will explore what is known to date.
Read more
Healthcare Security Pros Prioritize Sharing and Caring in the Wild, Wild West of Healthcare

January 02, 2018, Deborah McLain, Director, Heathcare & Life Sciences, Coalfire

Security professionals from healthcare delivery organizations (HDOs), medical device manufacturers, and pharmaceutical companies gathered in Scottsdale, Arizona for the NH-ISAC Cyber Rodeo Summit last month. The big topics were how to share more threat intelligence, while at the same time ensuring the highest level of patient care and safety.
Read more
Look Out! Risk Is on the Move, According to IoT Thought Leaders from Across the Globe

December 19, 2017, Deborah McLain, Director, Heathcare & Life Sciences, Coalfire

The IoT Security Summit 2017 in New York City in late October and the Security of Things World USA 2017 in San Diego last month were both packed with thought leaders from all parts of the IoT ecosystem – device manufacturers, telecom carriers, cloud providers, and early-adopter end users from vertical industries. They came, they saw, and they tried to conquer the many security challenges faced by organizations when implementing IoT initiatives . . . but came away with many unanswered questions.
Read more
Black Hat Europe puts cybersecurity on the C-Suite Agenda

December 18, 2017, Andrew Barratt, Managing Director, Europe
Black Hat is renowned for being one of the biggest, most technical security conferences in the world operating in the USA, Europe and Asia. 2017 marks Europe’s first Black Hat Executive summit, a format well received for senior executives to be able to openly discuss cyber security concerns and share business issues arising from cybersecurity deficiencies. Read more

Displaying results 21-25 (of 279)

|< < 1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - 9 - 10 > >|

About
Coalfire started in 2001 with a simple idea – cyber threats are increasing, compliance mandates are getting more complicated, and a well-designed cybersecurity program can help fuel your overall success.

Coalfire helps organizations comply with global financial, government, industry and healthcare mandates while helping build the IT infrastructure and security systems that will protect their business from security breaches and data theft. The company is a leading provider of IT advisory services for security in retail, payments, healthcare, financial services, higher education, hospitality, government and utilities.

The Coalfire Board of Directors provides invaluable guidance for the organization and reflects Coalfire’s dedication to achieving success for our customers.

The Executive Team is comprised of experienced senior leaders who oversee Coalfire’s key business units. Tom McAndrew, shown right is the Chief Executive Officer for Coalfire. He is recognized as one of the world’s leading cybersecurity experts in both the commercial and government sectors.

With a passion for quality, Coalfire uses a process-driven quality approach to improve the customer experience and deliver unparalleled results.

Created in honor of the late co-founder of Coalfire, the Richard E. Dakin Fund at The Denver Foundation is supporting scholarship programs at several universities for promising college students studying cybersecurity and related fields.

Security is a team game. If your organization values both independence and security, perhaps we should become partners.
Industries
The increased need for cyber security has become a common enterprise priority across the globe. However, industry requirements for effective cyber risk management are as distinct as the individual entities under fire. Enterprises and government organizations need more than an off-the-shelf audit to provide an effective threat assessment. They need industry- and organization-specific insights, tools and processes to protect digital assets and ensure compliance.

Coalfire can help cloud service providers prioritize the cyber risks to the company, and find the right cyber risk management and compliance efforts that keeps customer data secure, and helps differentiate products.

“Success” at a government entity looks different than at a commercial organization. Create cybersecurity solutions to support your mission goals with a team that understands your unique requirements.

The financial services industry was built upon security and privacy. As cyber-attacks become more sophisticated, a strong vault and a guard at the door won’t offer any protection against phishing, DDoS attacks and IT infrastructure breaches.

The continuum of care is a concept involving an integrated system of care that guides and tracks patients over time through a comprehensive array of health services spanning all levels of care. Interoperability is the central idea to this care continuum making it possible to have the right information at the right time for the right people to make the right decisions.

Maintaining network and data security in any large organization is a major challenge for information systems departments. However, in the higher education environment, the protection of IT assets and sensitive information must be balanced with the need for ‘openness’ and academic freedom; making this a more difficult and complex task.

When it comes to cyber threats, the hospitality industry is not a friendly place. Hotels and resorts have proven to be a favorite target for cyber criminals who are looking for high transaction volume, large databases and low barriers to entry.

The payments industry is undergoing rapid changes and unfortunately, an increasing risk for data breaches. Cyber criminals are growing increasingly businesslike, and payments leaders need to move quickly to cover their cyber risk.

The food and beverage industry is under attack from cyber criminals intent on stealing payment information. The food and beverage industry makes up the highest percentage of breach investigations, at nearly 73 percent, according to Visa.

The global retail industry has become the top target for cyber terrorists, and the impact of this onslaught has been staggering to merchants. To secure the complex IT infrastructure of a retail environment, merchants must embrace enterprise-wide cyber risk management practices that reduces risk, minimizes costs and provides security to their customers and their bottom line.

Private enterprises serving government and state agencies need to be upheld to the same information management practices and standards as the organizations they serve. Coalfire has over 16 years of experience helping companies navigate increasing complex governance and risk standards for public institutions and their IT vendors.

Technology innovations are enabling new methods for corporations and governments to operate and driving changes in consumer behavior. The companies delivering these technology products are facilitating business transformation that provides new operating models, increased efficiency and engagement with consumers as businesses seek a competitive advantage.

Cybersecurity has entered the list of the top five concerns for U.S. electric utilities, and with good reason. According to the Department of Homeland Security, attacks on the utilities industry are rising "at an alarming rate."
Solutions
Cyber risk management, advisory, technology and compliance services. Manage risk and maximize return on investment to prevent data breaches and theft. Coalfire’s solutions are led by a team of industry experts that help enterprise organizations understand a wide range of compliance and risk management initiatives, which enables a consistent cybersecurity framework across the organization.
Assessments
Expert assessments that provide an accurate understanding of what you are trying to protect, the inherent and residual cyber risk to your enterprise and the maturity of the your security program and underlying controls

Advisory
Customized services to help CISOs and Senior Management develop cybersecurity strategy, implement controls, and govern a security program

Cybersecurity Audit
Cybersecurity assurance services provided on a co-sourced basis to internal audit departments, or via independent audits commissioned directly by the board of directors or senior management
Cyber Defense
Adopt a proactive approach to cybersecurity

Security Monitoring and Analytics
Make more informed security-related decisions

Security Architecture
Design, engineer, and scale with confidence
DoD RMF
Certification and Accreditation (C&A) process for DoD

FedRAMP
Get FedRAMP authorized with the leading 3PAO

FFIEC
Reducing Financial IT Security Risk

FISMA
Meet your FISMA authorization needs

GDPR
General Data Protection Regulation

HIPAA
Health data protection for all shapes and sizes

HITRUST
The most rigorous approach to meeting HIPAA requirements

ISO 27001
An internationally recognized approach to information security

ITAR EAR DFARS
ITAR, EAR, and DFARS Advisory and Assessment

NERC CIP
Cyber security for electric grid critical infrastructure

NIST SP 800-171
Protect Controlled Unclassified Information for Nonfederal

PA-DSS
Payment Application Security Validation

PCI DSS
PCI Data Security Standard Compliance

P2PE
Point-to-Point Encryption

SOC
Establish and report controls to differentiate your organization
Research and Development
Malware and Vulnerability Research, Open Source Tools, and Opinions

Penetration Testing
Understand vulnerabilities and implement remediation before they’re exploited

Digital Forensics
Obtain, preserve, and examine digital evidence

Vulnerability Scanning & Assessment
Protect sensitive information systems with regular check ups

Application Security
Secure the design, development, and deployment of your applications

Red Team Exercise
Test your organization’s defense against a simulated real-world attack

Ransomware Threat Response
Employ solutions for prevention and recovery
Secure physical and digital IoT solutions with advisory, assessment and technical testing for makers, operators and users to empower the way we live and work.
CoalfireOne Overview
Control your Compliance

CoalfireOne Scanning Solutions
Easily identify IT vulnerabilities

CoalfireOne Assessments
Streamlining PCI Compliance
Resources
Careers
News
Contact
- Locations
Search for:

The Coalfire Blog

Recent Posts

Post Topics

Archives

RSS Feed

Tags