Freighters land in Anchorage around the clock. Their systems can't wait on a vendor's password reset.
Ted Stevens Anchorage International lands about 138 wide-body cargo flights a day, and its operator ranks it third in the world for cargo throughput. The city is also home to the Alaska Native Medical Center and to offices that run oil, gas and pipeline operations hundreds of miles away.
- Privileged Access ManagementCybersecurity
- OT & ICS SecurityCybersecurity
- Identity Governance & AdministrationCybersecurity
- Secrets & Certificate LifecycleCybersecurity
- Healthcare Provider PlatformsEnterprise Platforms
- Governance, Risk & ComplianceCybersecurity
In Anchorage we work with air cargo and logistics operators, oil, gas and pipeline companies, tribal health organizations and defense contractors.
The focus is privileged and vendor access to operational systems, evidence for TSA pipeline security directives, clinical identity governance and CMMC-aligned controls. Cohash serves Anchorage remotely from Frisco, Texas, and we fly up for workshops and launches, planned around weather and flight schedules.
Cohash has no Alaska office. We're headquartered in Frisco, Texas, run Anchorage engagements remotely, and travel north for discovery workshops, control room or clinic visits and go-live, with buffer days built in for weather.
- rules
- Alaska Personal Information Protection Act, AS 45.48.010Consumer reporting agency notice, AS 45.48.040TSA Security Directive Pipeline-2021-02 series
What's specific about Anchorage
Each figure comes from a public source, linked on the card.
Ted Stevens Anchorage International Airport says it ranks third in the world for cargo throughput, after Hong Kong and Shanghai, and reports about 138 wide-body cargo landings a day in fiscal 2026.
source ↗ 02Trade, transportation and utilities make up about 40.2 thousand of Anchorage's 183.4 thousand nonfarm jobs, more than any other supersector, per BLS for September 2026 (preliminary).
source ↗ 03 3,700The Alaska Native Tribal Health Consortium, a nonprofit tribal health organization operating since 1998, employs more than 3,700 people. It runs the Alaska Native Medical Center in Anchorage together with Southcentral Foundation.
source ↗Who we work with in Anchorage, and the rules they work under
-
Air cargo and logistics
Freight forwarders, ground handlers and carriers share ramp systems, cargo community platforms and customs filing tools, staffed in shifts. We move shared ramp terminals to badge sign-in, clean up partner accounts in cargo platforms and lock down the API keys that move manifest data.
-
Oil, gas and pipelines
North Slope field sites and pipeline facilities are often operated and supported from Anchorage offices and outside vendors. We map those remote paths, put them behind a vaulted and recorded gateway, and keep a tested break-glass route for when a satellite link is slow or down.
-
Tribal health organizations
Tribal health systems serve patients in remote villages, with clinicians rotating between Anchorage and regional clinics. We design identity lifecycles that follow staff between sites, access controls for telehealth, and governed data sharing that respects HIPAA and tribal data agreements.
-
Defense contractors
Firms supporting Joint Base Elmendorf-Richardson and other Alaska installations handle CUI on small IT budgets. We scope the smallest workable enclave and document MFA, privileged access and logging for a CMMC assessment.
-
Alaska Personal Information Protection Act, AS 45.48.010 ↗
Affected residents must be told in the most expeditious time possible and without unreasonable delay. A company may skip notice only if, after investigating and notifying the Attorney General in writing, it finds no significant risk of harm, and it must keep that determination in writing for five years.
-
Consumer reporting agency notice, AS 45.48.040 ↗
When more than 1,000 Alaska residents must be notified, the information collector also tells the nationwide consumer credit reporting agencies about the timing, distribution and content of the notices, without unreasonable delay. Entities subject to Gramm-Leach-Bliley are excluded from this section.
-
TSA Security Directive Pipeline-2021-02 series ↗
Owners of TSA-designated hazardous liquid and natural gas pipelines carry out a TSA-approved Cybersecurity Implementation Plan and assess it. Version 2021-02G was issued 1 May 2026. Access control and segmentation between IT and OT networks are core parts of the plan.
Most requested in Anchorage
The services clients in Anchorage ask us for most.
01Our pipeline control network is reached by vendors from outside Alaska. How do we show TSA that access is controlled?
Route every vendor and remote engineer path through one PAM gateway with MFA, per-session approval and recording, and remove direct VPN routes into the OT network. The gateway logs and access approvals become the evidence your Cybersecurity Implementation Plan points to. Segmentation design stays with your OT security team, and we coordinate with them.
02Does Alaska let us skip breach notice if we think no harm resulted?
Only after an appropriate investigation and written notice to the Attorney General, and the determination must be documented and kept for five years. Most organizations notify anyway when the facts are unclear. Counsel makes that call, and we supply the account and access timeline.
03Clinicians rotate between Anchorage and village clinics. How do we keep their access right?
Tie access to assignment records from scheduling or HR, so a clinician's EHR roles and device access follow the site they're working at this week. We add offline-capable sign-in for clinics with weak connectivity and review exceptions monthly.
04Does Alaska have a comprehensive consumer privacy law?
We are not aware of one in force as of October 2026. The Personal Information Protection Act covers breach notice, credit freezes and Social Security number use. Check with counsel, and remember that customers in other states may bring their own state laws.
e2a88241 - 01Ted Stevens Anchorage International Airport, airport factsdot.alaska.gov ↗
- 02BLS, Anchorage economy at a glancebls.gov ↗
- 03Alaska Native Tribal Health Consortium, who we areanthc.org ↗
- 04Alaska Statutes, Title 45 (Alaska Legislature)akleg.gov ↗
- 05AS 45.48.010 text (FindLaw)codes.findlaw.com ↗
- 06AS 45.48.040 text (FindLaw)codes.findlaw.com ↗
- 07TSA security directives and emergency amendmentstsa.gov ↗
Tell us what you're running. We'll tell you what we'd do first.
A 30-minute working session with a senior engineer. No slides.
- The platform and the version you're on
- Where you need to get to, and by when
- What's custom: rules, plugins, integrations
- Any audit finding or deadline driving it