• The HOW, WHY, and HUH? Blog on Disputes

    Travis Finn, Consultant, CoalfireOne Scanning Services

    As you may know, performing vulnerability scans is a requirement for PCI DSS compliance. One of those specific requirements, described in section 11.2.2, states that quarterly external scanning must be done by a qualified Approved Scanning Vendor. Coalfire just so happens to be an ASV, so if you need these scans we would happily oblige!

    Read more
  • The California Consumer Privacy Act: Will It Apply to Your Organization?

    Lisa Gumbs, Senior Consultant, Commercial Services, GDPR, Coalfire

    In August 2018, California issued a revised version of a new consumer privacy law—the California Consumer Privacy Act (CCPA). This statute goes into effect on January 1, 2020 and provides broad privacy protections to California consumers. This statute will have wide-ranging effects outside of California because it will apply to organizations that conduct business in California.

    Read more
  • PA-DSS to Software Security Framework: What You Need to Know

    Bhavna Sondhi, Senior Consultant, Commercial Services, Coalfire

    The Payment Application Data Security Standard (PA-DSS) developed by the Payment Card Industry Security Standards Council (PCI SSC) applies to software vendors and others who develop payment applications that store, process, or transmit cardholder data and/or sensitive authentication data. The list of various payment applications that are currently validated for software vendors is located on the PCI SSC Website.

    Read more
  • Scan Interference

    James Cox, Support Analyst, CoalfireOne Scanning Services, Coalfire

    Scan interference is best defined as when traffic from our scanners gets blocked, filtered, dropped, or modified in response to some sort of active protection system not recognizing our traffic. Once our scanners are flagged as an intruder, the client’s environment is no longer accessible, which causes the scan to fail. In order to ensure that reliable scans can be conducted, our scanners must be allowed to perform scanning without this interruption.

    Read more
  • CoalfireOne Special Notes

    Erica Woods, Associate, Commercial Services, Vulnerability Assessments and Scanning, Coalfire

    PCI-DSS can be challenging  to navigate – particularly when it comes to the ASV scanning requirements.  While fulfilling the scanning requirement is easy, obtaining a passing  attestation report may involve more than simply remediating failed findings.  One requirement that we receive many questions about is Special Notes.

    Read more
  • RISE in the Community

    Chalice Beam, Senior Manager, Health & Life Sciences, Coalfire

    Hope House of Colorado is metro-Denver’s only resource for providing free self-sufficiency programs to teen moms, including residential, General Educational Development (GED), and college and career programs. Additional supportive services include parenting and healthy relationship classes, life skills workshops, and certified counseling, all designed to prepare young mothers for long-term independence. On December 3, 2018, Coalfire RISE members teamed with Hope House of Colorado to announce a scholarship program to add to Hope House’s programs and advance our mission of giving back to our communities while supporting the development of cybersecurity talent.

    Read more

Recent Posts

Post Topics