Resources

Shadow AI AIR Isk Enterprisesecurity

Filters

Guide

AIUC-1 Assurance for AI Systems Moving into Enterprise Adoption

This solution brief explains how Coalfire and AIUC help AI product companies, enterprise deployers, and teams in high-scrutiny use cases turn broad AI trust questions into a scoped, evidence-based assurance conversation. It outlines the joint approach, from identifying the AI system and clarifying its deployment context to defining evidence needs and agreeing on the next step.

October 16, 2026

  • AI Governance

Guide

AI Coding Agent Security and Assurance: A Practical Path with AIUC-1

This one-pager explains how AI coding agents read repositories, run commands, and open pull requests with real privileges, which widens the attack surface beyond what traditional code review covers. It shows how AIUC-1 gives security teams a structured, auditable way to measure the controls that keep those agents safe across the development lifecycle.

October 16, 2026

  • AI Governance

Guide

The Multi-Assessment Advantage

How healthcare organizations can coordinate PCI, HITRUST, SOC 2, and HIPAA to reduce audit fatigue and eliminate redundant work.

October 7, 2026

  • Healthcare

Data Sheet

Independent assessments across 100+ frameworks.

Coalfire is one of the industry's leading cybersecurity assessment firms, validating compliance for organizations acrosscloud, technology, healthcare, financial services, government, and other regulated markets. Twenty-five years, and 3,000assessments a year.

September 11, 2026

Data Sheet

Coalfire ISO/IEC 42001:2023 Services

Organizations using Artificial Intelligence (AI) must demonstrate ethical, secure, and responsible development of their AIsystems.

July 18, 2025

Data Sheet

CMMC Enclave Build

Our CMMC Enclave Build delivers a seamless, customized path to certification; combining our deep advisoryand engineering expertise to guide you through every step of the process. From initial assessment to secure environmentbuildout..

May 19, 2025

  • CMMC

White Paper

Make FedRAMP CR26 PAIN ratings defensible at the executive level

This paper assumes the customer's cloud service offering holds a Class C Certification. Force levels and timeframes vary by Certification Class; a provider under Class A, B, or D should re-check the class-specific figures cited here before using this paper as a compliance basis.

September 30, 2026

  • FedRAMP®

White Paper

Build Enterprise Trust with ISO 27001

See how ISO 27001 can help reduce security friction, move complex deals forward, and give buyers the proof they expect in global markets.

July 13, 2026

  • ISO

Report

CMMC Defense Industrial Base Threat and Assurance Report

Coalfire’s CMMC Defense Industrial Base Threat and Assurance Report brings together current threat intelligence, C3PAO readiness observations, executive recommendations, and a practical action plan for prime contractors and subcontractors.

August 10, 2026

  • CMMC

Report

State of CMMC 2.0 Preparedness in the DIB Report

This report is published by Kiteworks and co-sponsored by Coalfire. The survey data was collected and processed by Centiment, an independent research firm specializing in market research for the cybersecurity industry. The analysis and recommendations contained in this report represent the collective expertise of both sponsoring organizations in CMMC 2.0 compliance and cybersecurity best practices for the Defense Industrial Base.

June 16, 2025

  • CMMC

Video

Missed seeing the NOC at Black Hat?

In a conversation with Brad Little, Neil “Grifter” Wyler draws on his experience with the NOC to discuss what makes the operation effective, how the team works together, and why the NOC continues to perform under pressure.

August 19, 2026

  • Cybersecurity
  • DivisionHex