Challenges

Small teams with limited resources have a difficult time achieving compliance.

CorePlan was working on their ISO27001 and SOC2 compliance. But without a correlated threat intel feed, the extensive manual research involved left their cybersecurity team with limited time for their day-to-day security operations.

Here are the key challenges CorePlan faced:

• No tailored information, creating too much manual research for a small team and making it difficult to get compliant

• No threat correlation, requiring massive time investment to find relevant information

• Manual processes prevented them from moving fast to get compliant and increased risk of incidents

Initial processes and tools

CorePlan had been using Crowdstrike to try to get ahead of their threats, but this only detected existing malware and didn’t offer any context on their threats.

Hoping to extract the threat data that was relevant to what they needed, they set up Google Alerts that filtered into their inbox.

However, this presented challenges in and of itself, such as an influx of irrelevant articles and manual sifting to find pertinent information. 

Even with Google Alerts set up, the core problem persisted: it was impossible to find any relevant information. It was clear that they needed a new kind of threat intel to help them. 

That’s why when CorePlan's CEO discovered Fletch and shared it with Cybersecurity Officer, Jaxon, it was almost a no brainer.

“When I saw Fletch, I didn’t need to look elsewhere to be honest.”

- Jaxon Melton, Cybersecurity Lead at CorePlan

Objectives

CorePlan sought several key benefits in a tool like Fletch:

• Efficiency: Compliance deadlines were on the horizon and manual processes ate up countless hours. The tool needed to be able to significantly cut down on time spent.

• Simplicity: As a small team, there couldn’t be a huge learning curve in a new tool. Additionally, the tool needed to be able to give updates to non-technical people so that anyone from executives to stakeholders could easily be informed.

• Focus: The threat landscape is overwhelming, confusing and constantly evolving. Existing tools simply couldn’t make heads or tails of it. The tool needed to be able to cut out the noise and quickly get them to what mattered.

Solution

After months of muddling through manual processes, Fletch turned out to be the exact solution that Jaxon sought after, and more. 

Jaxon found himself pleasantly surprised at how easy Fletch made it to create his workspace and integrate his other tools. There was minimal setup and lag time involved.

Within 24 hours, he could open Fletch to see the threats that correlated to their data in order of priority. This allowed him and CorePlan to easily know what specific threats to focus on, saving them crucial time on research and instilling confidence knowing their threat intel was reliable and verified sources.

“Now there’s a central location of information, so I can be like, “Hey did you see that threat? Crazy, right?” And we can quickly look at it and assess if something needs to be done.”

- Jaxon Melton, Cybersecurity Lead at Coreplan

Fletch’s ability to simplify cybersecurity and the threat landscape has made it easier for Jaxon to educate stakeholders and employees. 

He can see what threats are most pressing and implement the necessary patches and mitigations faster than ever before.

“Fletch is super simple. There’s no clutter. There’s not 50,000 things you have to go through. It has a good interface and you’re getting exactly what you sign up for — a tailored threat intelligence feed. I immediately noticed how easy it is to use.”  

- Jaxon Melton, Cybersecurity Lead at CorePlan

Results: 100s of emails down to just 1

Since using Fletch, CorePlan has achieved and maintained ISO27001 and SOC2 compliance. 

With Fletch, they’ve refined their cybersecurity efforts,  optimized operations and reduced complexity.

Today, they begin their daily routine by checking the correlated threats on the Fletch Daily Threat Report. For any threats of note, they can look at the Threat Board for comprehensive threat data, actionable advice, and educational comms.

“Fletch simplifies things a lot because it’s one source-of-truth. You don’t have multiple news articles you’re referring to. You don’t have to worry about dodgy links or misinformation. You can build trust with the people at your company.” 

- Jaxon Melton, Cybersecurity Officer at CorePlan

Key Features and Benefits:

1. Daily Threat Report: Fletch’s Daily Threat Report, is now a staple in CorePlan’s cybersecurity routine and key to staying up-to-date on potential risks.

2. Forecast threats: Fletch’s Forecaster feed gives updates on threats targeting applications and services used by CorePlan, eliminating the need to sift through countless articles.

3. Easy Setup: Simple set up and ease of use proved to be a crucial factor for CorePlan in streamlining their operations.

4. Affordable: Fletch’s affordable pricing made it an obvious decision for CorePlan to get correlated threat intelligence.

Takeaway

For CorePlan, Fletch proved to be the perfect fit, providing a cost-effective solution that not only addressed their immediate cybersecurity challenges but also contributed to achieving and maintaining compliance. Fletch was made for businesses trying to achieve compliance and have a truly intelligent threat intelligence feed.