The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • FedRAMP deadline- Industry and Agency Days

    May 15, 2014, Rob Barnes, Director, Federal Practice

    The FedRAMP PMO sent out a notification that they are holding a FedRAMP Industry Day on June 4, 2014 and an Agency Day on June 10, 2014. Items to discuss include the June 5, 2014 deadline, NIST SP 800-53 rev 4 transitions and the 3PAO privitization progress to name a few. We wanted to republish the notification for those that may not have seen the notification.

    Read more
  • Target Kill Chain Analysis

    May 07, 2014, Rick Dakin, CEO, Co-founder and Chief Security Strategist

    Last week, I talked with Wall Street Journal reporter Ben DiPietro about the persistent communications gap between the data center and the board room when it comes to recognizing and tackling security threats: In almost every breach situation after his company completes a forensic analysis, Mr. Dakin said the chief executive or chief financial officer pulls him aside and says if he had better information earlier he would have made smarter and quicker decisions. “They are intimating that their tech teams are just not talking about cyber risk in terms of business impact.”

    But when he speaks with the IT people, Mr. Dakin said he gets a different story, “that my boss just doesn’t get it and we are stuck here with outdated tools, outdated systems and we are not prepared to defend ourselves.”

    Read more
  • New National Exam Program Risk Alert

    April 24, 2014, Justin Orcutt, Regional Sales Manager

    In case you missed the most recent National Exam Program Risk Alert, you might want to head over to their website and determine what this may mean for you and your company. Since this may be a topic at your next board meeting, you should be prepared to answer any potential questions. Your board will want to know the status and effectiveness of your cybersecurity because the SEC will now be conducting examinations of more than 50 registered broker-dealers and registered investment advisers. 

    Read more
  • Heartbleed – When Will the Next Shoe Drop?

    April 22, 2014, Rick Dakin, CEO, Co-founder and Chief Security Strategist

    Last week, while I was in the offices of one of our customers, a long-present but little-known vulnerability in OpenSSL became public knowledge. Our client detected it early and made the necessary patches and updates. The systems deployed by their customers are now secure. Consumers will change their passwords and credentials stolen prior to the Heartbleed fixes will be worthless. Read more
  • The Top 3 Security Issues in Federal Cloud Computing

    April 17, 2014, Rob Barnes, Director, Federal Practice

    A journalist recently asked me for my top three pressing concerns related to Federal cloud security. Here are a few points I had to offer up.

    Read more
  • Displaying results 186-190 (of 295)
     |<  <  34 - 35 - 36 - 37 - 38 - 39 - 40 - 41 - 42 - 43  >  >| 

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags