The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • PCI SSC Releases New SAQ Versions for 3.0

    February 28, 2014, Matt Getzelman, PCI Practice Director

    As expected, the SSC finally released the new version of the Self-Assessments Questionnaires (SAQs) today on their website. They are available on the PCI SSC’s website here:

    Read more
  • Would EMV Help?

    February 26, 2014, Andrew Barratt, Managing Director, Europe

    With the spate of cyber attackers on US retailers recently, Coalfire’s European Managing Director, Andrew Barratt considers how the attacks on retailers differ outside the US and what the potential impact of similar attacks is in a world where chip and pin technology is more widely deployed. 

    Read more
  • PCI DSS 3.0 ROC Reporting Template Released

    February 11, 2014, Matt Getzelman, PCI Practice Director

    Heads up for our PCI customers: the PCI SSC released the “ROC Reporting Template for v3.0” this last weekend and it is available here. This document supports the PCI DSS 3.0 standard and must be used by all QSA organizations to create and submit a Report on Compliance (ROC).  What does this mean? 

    Read more
  • Target Hackers Broke in Via HVAC Company?

    February 06, 2014, Adam Shnider, VP, West Region, Professional Services

    When I first heard about the account used to gain access to the Target environment, my first reaction was to laugh at the ridiculousness of the HVAC vendor having an impact on the CDE like it seems to (or is rumored) to have had in the recent breach.  Then I started thinking with the PCI controls, including 8.5.6, requirements for revoking vendor access, how could an HVAC vendor account be the culprit for such a broad attack and how could this affect our customers.

    Read more
  • Are you ready for PA-DSS 3.0?

    January 20, 2014, Dan Fritsche, Practice Director, Coalfire Labs

    There’s been a lot of chatter about PA-DSS 3.0 among several early-adopter application vendors. As of January 1, 2014 it’s permissible to validate against 3.0 in place of a 2.0 validation. Longevity of the 3.0 validation and the desire to be validated first on a new standard seem to be driving the move to 3.0. The expiration date of a 3.0 validation is October 28, 2019 vs. October 28, 2016 for a 2.0 validation.

    Read more
  • Displaying results 216-220 (of 313)
     |<  <  40 - 41 - 42 - 43 - 44 - 45 - 46 - 47 - 48 - 49  >  >| 

Recent Posts

Post Topics

Archives

Tags