Resources

Data Sheet

Risk Assurance Program

Our assessment projects regularly come into contact with sensitive details about your organization, such as policies, procedures, configuration documents, diagrams, and internal security practices. To help build trust, we have developed a supplier inquiry program that provides transparency into our internal security risk management program.

April 2, 2018

• Compliance

White Paper

A Newly-Hired CISO’s Priorities: The First 30, 60 and 90 Days

 This article offers insights into priorities for CISOs during their first 90 days in office to help set the stage for a successful tenure.

March 16, 2018

• Cyber Risk Advisory

White Paper

HITRUST CSF Certification: Frequently Asked Questions

As with any complex framework, there are often questions regarding how to obtain certification, the issues surrounding the CSF, and the relationship between HIPAA and HITRUST. The objective of this FAQ document is to address and clarify common questions regarding the assurance program, HITRUST CSF scoring, and the underlying HITRUST CSF.

February 16, 2018

• Compliance

White Paper

How to Get Started with HITRUST CSF Certification

The purpose of this guidance document is to provide key information with respect to the HITRUST CSF and illustrate the steps involved in starting the HITRUST CSF certification process so organizations can approach this rigorous framework with greater ease, expertise, and efficiency.

February 16, 2018

• Compliance

Video

How Can AWS reduce the Cost to Obtain a FedRAMP® ATO?

Learn about how you can leverage the work that AWS has already done to reduce your costs in obtaining a FedRAMP ATO for your organization.

January 19, 2018

• Cloud
• Compliance
• FedRAMP®

Video

How Do AWS and Coalfire® Make FedRAMP® Authorization Easier?

The journey to FedRAMP authorization can be made easier by leveraging the work that AWS has already done. Coalfire can help you map out the shortest and easiest path for your organization and guide you along the way.

January 19, 2018

• Cloud
• Compliance
• FedRAMP®

Video

What is the Difference Between GovCloud and US East/West to Achieve FedRAMP® Authorization?

There are two paths to FedRAMP authorization on AWS, GovCloud and US East/West. This video can help you decide which path is right for you.

January 19, 2018

• Cloud
• Compliance

Video

System Baseline Hardening Deployment

Many compliance programs, such as PCI DSS, HIPAA, FISMA and CGIS require a hardened baseline to be implemented within an organization’s information systems. Learn how to build a hardened baseline, examine some of the tools to assist in a phased approach to deployment, demo Ansible and Microsoft compliance manager and discuss some common issues.

December 12, 2017

• Cybersecurity

Case Study

Coalfire® Helps Enterprise Security Company Navigate FedRAMP®

A global network and enterprise security company that provides protection against cybersecurity breaches to tens of thousands of worldwide organizations chose Coalfire to perform a FedRAMP gap analysis. 

September 28, 2017

• Compliance
• FedRAMP®