The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • SOC 2 Type 1 and SOC 2 Type 2 Frequently Asked Questions

    May 09, 2017, Dixon Wright, Managing Principal, SOC

    Coalfire’s SOC Practice Directors Dixon Wright and Jeff Cook recently conducted a webinar on AWS and SOC Reporting, What you need to know. The presentation provided a lot of good points that organizations should know or be prepared for regardless of the technology that is being used. Below you will find a transcript of the Q&A session from the webinar.

    Read more
  • SSAE No 18 effective for SOC reports dated May 1, 2017

    February 15, 2017, Jamie Kilcoyne, Managing Director Coalfire Controls

    The AICPA Auditing Standards Board (ASB) announces new changes for SOC reporting under SSAE No. 18 in April 2016. A description of the changes and what it means for service organizations is below.

    The AICPA’s attestation standards contain the requirements and application guidance for performing and reporting on examination, review, and agreed-upon procedures engagements. Since Service Organization Controls (SOC) reports are classified as “examinations”, the attestation standards apply to these engagements.

    Read more
  • Would Coalfire Clients benefit from membership with the PCAOB?

    April 28, 2015, Leslie Kaniecki, CPA/CGMA

    Coalfire Controls, LLC (Coalfire) is a registered Certified Public Accounting (CPA) firm registered with the American Institute of Certified Public Accountants (AICPA) and the Colorado State Board of Accountancy, as required to issue Service Organization Control (SOC) attestation reports in accordance with AICPA Statements on Standards for Attestations and Engagements (SSAE).  However, Coalfire clients or prospects might wonder why Coalfire is not also registered with the Public Company Accounting Oversight Board (PCAOB). It raises the question: would Coalfire’s clients benefit from the firm’s membership with the PCAOB?

    Read more
  • COSO Framework for Service Organizations and SOC Reporting (Part 2 of 3)

    March 06, 2015, Jamie Kilcoyne, Managing Director Coalfire Controls

    Every SOC report (whether it is a SOC 1, SOC 2 or SOC 3) should include information about the service organization’s risk assessment process.  Risk assessment can take many forms and there is no “one size fits all” format.  Risk assessment is intended to be an evolutionary process, designed to meet the specific needs of individual companies.

    Read more
  • COSO Framework for Service Organizations and SOC Reporting (Part 1 of 3)

    February 24, 2015, Jamie Kilcoyne, Managing Director Coalfire Controls

    One of the most important reference tools that companies use to establish and evaluate their internal controls is the Committee of Sponsoring Organizations' (COSO) Internal Control - Integrated Framework.  Initially published in 1992 (the 1992 Framework), the COSO framework has been the most widely used model for internal control for the past 20 years.

    Read more

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags