The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • She Powers Tech

    December 01, 2017, Jennifer Tonisson, Partner Marketing Manager, Technology & Cloud, Coalfire

    November 28th at the Venetian in Las Vegas, AWS re:INVENT held an important session that could shape the future of technology. The sold-out session, SHE POWERS TECH: Women Supporting Women in Tech, filled a ballroom with 500 women in technology and a few men who were interested in the topic. The impressive line-up of speakers included women in a wide variety of technological fields spanning automotive engineering to technology in fashion.

    Read more
  • SOC 2 Type 1 and SOC 2 Type 2 Frequently Asked Questions

    May 09, 2017, Dixon Wright, Managing Principal, SOC

    Coalfire’s SOC Practice Directors Dixon Wright and Jeff Cook recently conducted a webinar on AWS and SOC Reporting, What you need to know. The presentation provided a lot of good points that organizations should know or be prepared for regardless of the technology that is being used. Below you will find a transcript of the Q&A session from the webinar.

    Read more
  • Cloud Burst?

    March 01, 2017, Jeremy Gibbons, AWS Channel Lead, Coalfire

    The cloud can burst!? This week’s AWS service disruption showed us the importance of architecting a system to account for failure, and how to be successful when deploying your solution in the cloud.

    Read more
  • FedRAMP Prioritization

    August 29, 2016, Abel Sussman , Director, TAAS – Public Sector and Cyber Risk Advisory

    Coalfire has been participating in the American Council for Technology and the Industry Advisory Council (ACT-IAC) Cloud Computing community of interest in order to contribute in developing the new FedRAMP JAB Prioritization process.

    Read more
  • FedRAMP High Baseline Requirements Published

    June 28, 2016, Abel Sussman , Director, TAAS – Public Sector and Cyber Risk Advisory

    The Federal Risk and Authorization Management Program (FedRAMP) Project Management Office officially released its High baseline for High impact-level systems. This baseline is at the High/High/High categorization level for confidentiality, integrity, and availability in accordance with FIPS 199; and is mapped to the security controls from the NIST SP 800-53, Rev. 4 catalog of security controls. Previously, the FedRAMP authorization process was only designed for low and moderate impact systems.

    Read more
  • Displaying results 1-5 (of 16)
     |<  < 1 - 2 - 3 - 4  >  >| 

Recent Posts

Post Topics

Archives

RSS Feed

The Coalfire BlogSubscribe to Feed
Chrome users will need to install RSS Subscription Extension (by Google)

Tags