The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • Final HITECH Act Stage 3 Meaningful Use Rules May Require Annual Risk Analysis plus a Risk Management Component

    June 03, 2015, Andrew Hicks, Managing Principal, Coalfire

    The comments are in and the HHS is scrambling to review them all before they issue the final Stage 3 Meaningful Use rules later this summer.  Comments from entities such as CHIME and HIMSS represent good news and bad news for healthcare providers, depending on how you look at it.  The HIPAA Security Rule has always required a risk analysis, but now there could be an annual requirement for risk analyses.

    Read more
  • Big news from the HITRUST 2015 conference: The HITRUST CSF is gaining momentum as the de facto framework amongst healthcare organizations

    May 29, 2015, Andrew Hicks, Managing Principal, Coalfire

    As the HITRUST 2015 conference in Grapevine, Texas ended, I was reminded of the numerous predictions that flagged 2015 the year of the [healthcare] breach.  And in just the first half of the year we’ve already witnessed three mega breaches that combined to compromise over 90 million patient records.  At the HITRUST conference attendees were greeted with a plethora of speakers ranging from payers and providers to service providers and certified practitioners, Coalfire included.

    Read more
  • Reporting LIVE from the HIMSS 2015 Cybersecurity Command Center

    April 30, 2015, Andrew Hicks, Managing Principal, Coalfire

    Well, it’s not exactly live anymore but it certainly was worth tweeting live from the brand new Cybersecurity Command Center (CCC) at HIMSS 2015 in Chicago a couple weeks ago given all the excitement.  The CCC was the place to be at HIMSS this year with standing room only at the educational sessions.  HIMSS staff members were busy adding rows of seating to the session area to fit all the attendees who were clamoring for valuable information delivered by numerous speakers from the FBI to the Secret Service to cyber risk subject matter experts.

    Read more
  • The Future of Healthcare Cybersecurity: The Best Defense is a Good Offense

    March 20, 2015, Andrew Hicks, Managing Principal, Coalfire

    In the last five years with the increasing digitalization of health information, healthcare security breaches have increased four-fold with the industry experiencing more breaches than any other in 2013. With a large number of potential targets and the high value of personal medical information on the black market, healthcare organizations will continue to be more appealing targets.

    Read more
  • Anthem Data Breach - A Message from Coalfire's Healthcare Practice Director

    February 05, 2015, Andrew Hicks, Managing Principal, Coalfire

    Several weeks ago I had the opportunity to speak on a panel at a healthcare conference. In attendance were CIOs, CISOs, VPs of IT, and members of legal counsel. The individuals attending the session represented organizations ranging from small- to medium-sized business associates all the way up to large, multi-networked hospitals defined as covered entities under the Health Insurance Portability and Accountability Act (HIPAA).

    Read more
  • Displaying results 6-10 (of 25)
     |<  <  1 - 2 - 3 - 4 - 5  >  >| 

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags