Other Assisted Services

Business owners, individuals, and third parties, often engage us to perform an agreed-upon procedures (AUP) engagement to perform specific procedures and report findings. AUPs are conducted by our audit professionals in accordance with attestation standards established by the American Institute of Certified Public Accountants. Our clients, often at the request of a third party, select the procedures to be performed and accept full responsibility for the sufficiency of the requested procedures. Our report details the procedures we performed and our findings. Examples of AUP engagements include compliance with licensing and royalty agreements, calculations of internal rate of return and other mathematical computations, confirming specific information with third parties, performing specific procedures on work performed by others, and reviewing documents to confirm transactions.

PCI DSS compliance is required for any organization that stores, processes, or transmits cardholder data. For some businesses, compliance is considered an obligation. For others, it’s fundamental to broader business objectives. To address your individual needs, we offer a portfolio of PCI DSS compliance services:

• Scope definition and advisory – Define and develop a scope to minimize delays and cost overruns, eliminate blind spots in your environment and processes, and help establish a more proficient compliance program.
• Level 1 assessment – Apply our efficient, systematic PASS methodology to deliver a full report on compliance (ROC), while minimizing disruption and setting you up for long-term compliance success.
• Facilitated self-assessment – Facilitated by a Partner’s QSA to help Level 2, 3, and 4 merchants and Level 2 service providers quickly, easily, and safely complete a Self-Assessment Questionnaire (SAQ).
• Vulnerability scanning – Address scanning and reporting requirements and help you identify and remediate vulnerabilities, as an Approved Scanning Vendor.
• Penetration testing – Simplify compliance with PCI DSS requirement 11.

We can also help you customize a continuous compliance solution that provides year-round compliance program support, helps you maintain your compliance posture, and addresses resource gaps.

Compliance Essentials is a next-generation solution for managing compliance, assessments, and risk more easily and efficiently. Our enterprise-grade solution combines SaaS technology with expert guidance and assessment services, making the compliance process more efficient. Plus, it supports all major compliance frameworks, including PCI, SOC, ISO, HIPAA, HITRUST, FedRAMP, NIST, and more.

Vulnerability Assessment
vulnerability assessment services help you assess on-premise hosts, databases, and web applications to identify potential configuration and asset management deficiencies. From there, you can strengthen your cyber defenses and ensure consistency and completeness of your security processes. Coalfire does this on a regular basis to ensure continued identification and resolution of potential security issues.

• Identify weaknesses in patching and configuration management.
• Develop configuration and patch management plans and procedures.
• Prioritize security defects for efficient resolution.
• Determine your organization’s security weaknesses and aggregate level of risk using a blue team approach.
• Test compliance for audits and regulations.
• Automate vulnerability management as much as possible.

Penetration Testing
penetration testing services provide a comprehensive approach that includes asset discovery, threat modeling, compliance testing, offensive security testing, and remediation support. By partnering with the most experienced and largest pen testing organization, our Partner’s will help you reduce your internal and external threat vulnerabilities keeping costs down and productivity levels up.
Our comprehensive support – with people, processes, and technology – allows us to help you scale regardless of size and navigate the entire vulnerability management process.

More than 100 Organizations have leveraged our objectivity through published white papers. Our papers highlight your approach to cyber security, provide credible support to your marketing efforts, and make your sales cycles easier and shorter. We work with your team to develop a white paper that addresses your audience and business goals.