What Will Happen to My ISO Certificate During a Global Pandemic?

David Forman, Managing Principal, Coalfire ISO, Inc.

As the coronavirus outbreak continues and safety concerns relating to travel and large group meetings increase globally, Coalfire ISO (“CFISO”) has been monitoring the effects of this crisis on both its customers and its employees. As a certification body, CFISO maintains accreditation with both the ANSI National Accreditation Board (ANAB) and the United Kingdom Accreditation Service (UKAS). Both governing bodies have been proactive in their responses to this developing worldwide event and have issued guidance to certification bodies referenced below.

COVID-19 Pandemic Stresses the Importance of Business Continuity

Rich Curtiss, Director, Healthcare Risk Assurance Services

One of the more critical aspects of organizational risk management is that of Business Continuity.  Many organizations overlook the importance of developing and instituting a Business Continuity Plan (BCP).

Compliance in the Cloud - Effective Strategies to Ensure Success

Adam Kerns, Managing Principal, Commercial Services: Product Development, Coalfire

It's no secret that the principles, controls, and terminology associated with compliance can be a confusing alphabet soup that hinders an organization's ability to go-to-market and expand its customer base. The difficulties in meeting compliance objectives are not limited to organization size or types. Most (if not all) organizations struggle to integrate compliance requirements into their existing workloads and systems.

Keeping Privacy Afloat During a Pandemic

Chalice Beam, Senior Manager, Health & Life Sciences, Coalfire

Aligning Enterprise Cyber Risk and Business Strategy

Doug Hudson, Senior Director, Cyber Risk Advisory, Coalfire

Most business leaders have a contextual awareness of cyber risk and the threats facing their organizations. However, this contextual awareness rarely contributes to a clear, consolidated directive that can be applied across the organizations. Further, many organizations struggle to align their cyber risk management initiatives and their organization’s business strategies. This creates operational friction between those responsible for managing enterprise cyber risk and the business leaders’ goal of expanding their market presence, maintaining revenue streams, and developing new products and services. What is needed is an approach that aligns enterprise cyber risk and business strategy in a way that communicates how cyber risk can enable the business to expand its markets, protect revenue streams, and securely develop and deploy new products and services.

The Basics of Exploit Development 2: SEH Overflows

Andy Bowden, Consultant, Coalfire Labs

In this article we will be writing an exploit for a 32-bit Windows application vulnerable to Structured Exception Handler (SEH) overflows. While this type of exploit has been around for a long time, it is still applicable to modern systems.

Third Party Risk Management and the Cloud

Michael Reiter, Director, Cyber Risk Advisory, Coalfire

Security awareness and preparation are getting more widespread. Corporate boards and C-suite executives are taking Third-Party Risk Management (TPRM) more seriously as they see what has happened to other enterprises in the not-so-distant past. I am speaking primarily of the top-level enterprises, but even smaller companies and less tech-oriented companies often have a hard time securing their infrastructure. If you are a widget supplier with a hundred employees, it’s hard—maybe impossible—to dedicate a full-time resource to things like patching, firewalls, identity and access management, and intrusion detection and incident response. The money just isn’t there.

Quality is Job One When it Comes to the HITRUST CSF Assurance Program

Zach Shales, Principal, Healthcare Certification, Coalfire