The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts.


  • What is Your Risk Assessment Worth?

    John Rostern, VP, Technology Advisory and Assessment Services

    A risk assessment provides your organization with a tool to determine how, where and how much to invest in controls and security over technology.  It also serves to document the risk acceptance policy of your organization as the acceptable level of risk dictates the level of controls to be implemented.  It is also a requisite part of legal and regulatory compliance for Sarbanes-Oxley, HIPAA and PCI, among others. 

    Read more
  • GivingFirst Launches online Charity Processing Service

    Rick Dakin, CEO, Co-founder and Chief Security Strategist

    In the spirit of the Holiday Season, Coalfire has made a significant contribution to GivingFirst.org in the form of free Penetration Testing services.  GivingFirst is a Denver-based community foundation whose mission is “to improve quality of life by increasing community generosity and involvement.” 

    Read more
  • Exercise your Incident Response Plan

    Mike Weber, Vice President, Coalfire Labs

    So you’ve finally completed your Incident Response Plan.  You’ve named your team, defined roles, documented standard operating procedures, and establishing escalation processes.  Heck, you’ve even got training material.  So now what? 

    Read more
  • Cyber Security Awareness - Are you Doing All You Can to Stay Safe?

    Rick Dakin, CEO, Co-founder and Chief Security Strategist

    Every company has vulnerabilities and must learn to protect themselves from fast-moving cyber threats.  Below are a few tips to keep in mind as you examine your network security:

    Read more
  • Can we kick the attachment habit?

    John Rostern, VP, Technology Advisory and Assessment Services

    As consumers of messaging services, particularly email, we have become addicted to attachments. This habit has become an easy avenue for mounting cyber-attacks against an organization. In the 2010 Verizon Data Breach Investigations Report, conducted in cooperation with the United States Secret Service, 38 percent of breaches utilized some form of malware and 28 percent employed social tactics.

    Read more
  • Displaying results 391-395 (of 416)
     |<  <  75 - 76 - 77 - 78 - 79 - 80 - 81 - 82 - 83 - 84  >  >| 

Recent Posts

Post Topics

Archives

Tags

Accounting Agency AICPA Assessment assessments ASV audit AWS AWS Certified Cloud Practitioner AWS Certs AWS Summit bitcoin Black Hat Black Hat 2017 blockchain Blueborne Breach BSides BSidesLV Burp BYOD California Consumer Privacy Act careers CCPA Chertoff CISO cloud CMMC CoalfireOne Compliance Covid-19 credit cards C-Store Culture Cyber cyber attacks Cyber Engineering cyber incident Cyber Risk cyber threats cyberchrime cyberinsurance cybersecurity danger Dangers Data DDoS DevOps DevSecOps DFARS DFARS 7012 diacap diarmf Digital Forensics DoD DRG DSS e-banking Education encryption engineering ePHI Equifax Europe EU-US Privacy Shield federal FedRAMP financial services FISMA Foglight forensics Gartner Report GDPR Google Cloud NEXT '18 government GRC hack hacker hacking Halloween Health Healthcare heartbleed Higher Education HIMSS HIPAA HITECH HITRUST HITRUST CSF Horror Incident Response interview IoT ISO IT JAB JSON keylogging Kubernetes Vulnerability labs LAN law firms leadership legal legislation merchant mobile NESA News NH-ISAC NIST NIST 800-171 NIST SP 800-171 NotPetya NRF NYCCR O365 OCR of P2PE PA DSS PA-DSS password passwords Payments PCI PCI DSS penetration Penetration Testing pentesting Petya/NotPetya PHI Phishing Phising policy POODLE PowerShell Presidential Executive Order Privacy program Ransomware Retail Risk RSA RSA 2019 Safe Harbor Scanning Scans scary security security. SOC SOC 2 social social engineering Spectre Splunk Spooky Spraying Attack SSAE State Stories Story test Testing theft Virtualization Visa vulnerability Vulnerability management web Wifi women XSS
Top