The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • Reconciling Quarterly ASV and QSA Scanning Requirements

    February 02, 2017, Rebecca Larson, ScanDesk Director, Coalfire

    In the compliance realm, the term “quarterly” seems to be a sound and straight-forward term used to provide guidance and to aid entities in adhering to requirements. However, it’s meaning can vary based on its context in relation to dealing with various compliance requirements from your ASV and QSA. Here are some guidelines around what you can do to prevent getting snagged in the potential mire of abiding by quarterly scanning requirements.

    Read more
  • FedRAMP Readiness Assessment Report (RAR) template launched

    February 02, 2017, Abel Sussman , Director, TAAS – Public Sector and Cyber Risk Advisory

    As part of the FedRAMP Accelerated process, cloud service providers (CSPs) can now complete a Readiness Assessment Report (RAR) to demonstrate their readiness for the FedRAMP process. The RAR is required for CSPs pursuing the FedRAMP JAB approval route.  CSPs should also consider having a Readiness Assessment if they are pursuing the Agency approval route, where the RAR is not required, in order to provide assurances of the security posture for their solution.

    Read more
  • New PCI DSS Scoping Guidance Corroborates Coalfire’s Approach

    December 30, 2016, Shawn Shifflett, CISSP, QSA, Senior Practice Director, PCI

    On Friday, December 6th 2016, the PCI Security Standards Council released their formal information supplement titled, Guidance for PCI DSS Scoping and Network Segmentation. This particular information supplement has been eagerly anticipated in the PCI DSS industry for several years. The document seeks to address some of the numerous, and often extremely varying, interpretations of scoping and segmentation requirements across the QSA population. These scoping choices have immediate impact on near-term costs and attainment of compliance, but ultimately they significantly impact a company’s security posture. How does this affect Coalfire customers? The impact should be fairly limited if you have worked with Coalfire and accepted our recommendations to align with the information that we had from our involvement in the PCI Community.

    Read more
  • What’s Your Computer Thinking About? Examining Random Access Memory (RAM)

    December 28, 2016, Robert Meekins, Director, Forensics, Coalfire

    How valuable would it be to be able to read another person’s mind? To know what they’re thinking or planning to do would be invaluable. Or, how valuable would it be to know what they have done in the recent past, especially if you believed they were involved in some criminal activity? Who they were talking to, or what they said. If you could recreate the events and determine the timeline of activity, information like this could help you in solving plenty of mysteries.

    Read more
  • FedRAMP in Bloomberg

    December 14, 2016, Abel Sussman , Director, TAAS – Public Sector and Cyber Risk Advisory

    Recently Bloomberg Government published an article that describes the increasing awareness of the Federal Risk and Authorization Management Program (FedRAMP) as a major factor affecting the federal marketspace. The article indirectly indicates a major first-mover advantage, as there are “only 77 products” available to fulfill over two hundred Bloomberg-identified FedRAMP opportunities.

    Read more
  • Displaying results 46-50 (of 258)
     |<  <  6 - 7 - 8 - 9 - 10 - 11 - 12 - 13 - 14 - 15  >  >| 

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags