Challenges

It’s tough for small companies to get and stay compliant especially with limited resources and small or even nonexistent security teams. 

CorePlan was no stranger to this pain point as they sought to get ISO27001 and SOC2 compliant as a small company. This limited their day-to-day security operations. Without a correlated threat intel feed, their cybersecurity team was left with extensive manual research.

Here are the key challenges CorePlan faced:

• No tailored information, creating too much manual research for a small team and making it difficult to get compliant

• No threat correlation, requiring massive time investment to find relevant information

• Manual processes prevented them from moving fast to get compliant and increased risk of incidents

Initial processes and tools

CorePlan had been using Crowdstrike to try to get ahead of their threats, but this only detected existing malware and didn’t offer any context on their threats.

Hoping to extract the threat data that was relevant to what they needed, they set up Google Alerts that filtered into their inbox.

However, this presented challenges in and of itself, such as an influx of irrelevant articles and manual sifting to find pertinent information. 

Even with Google Alerts set up, the core problem persisted: it was impossible to find any relevant information. It was clear that they needed a new kind of threat intel to help them. 

That’s why when CorePlan's CEO discovered Fletch and shared it with Cybersecurity Officer, Jaxon, it was almost a no brainer.

“When I saw Fletch, I didn’t need to look elsewhere to be honest.”

- Jaxon Melton, Cybersecurity Lead at CorePlan

Objectives

CorePlan was looking for a several key benefits in a tool like Fletch:

• Efficiency: Compliance deadlines were on the horizon and manual processes ate up countless hours. The tool needed to be able to significantly cut down on time spent.

• Simplicity: As a small team, there couldn’t be a huge learning curve in a new tool. Additionally, the tool needed to be able to give updates to non-technical people so that anyone from executives to stakeholders could easily be informed.

• Focus: The threat landscape is overwhelming, confusing and constantly evolving. Existing tools simply couldn’t make heads or tails of it. The tool needed to be able to cut out the noise and quickly get them to what mattered.

Solution

After months of muddling through manual processes, Fletch turned out to be the exact solution that Jaxon sought after, and more. 

Jaxon found himself pleasantly surprised at how straightforward workspace creation and integrating with other tools was in Fletch. There was minimal setup and lag time involved.

Within 24 hours, he could open Fletch to see the threats that correlated to their data in order of priority. This allowed him and CorePlan to easily know what specific threats to focus on, saving them crucial time on research and instilling confidence knowing their threat intel was reliable and verified sources.

“Now there’s a central location of information, so I can be like, “Hey did you see that threat? Crazy, right?” And we can quickly look at it and assess if something needs to be done.”

- Jaxon Melton, Cybersecurity Lead at Coreplan

Fletch’s ability to simplify cybersecurity and the threat landscape has made it easier for Jaxon to educate stakeholders and employees. 

He can see what threats are most pressing and implement the necessary patches and mitigations faster than ever before.

“Fletch is super simple. There’s no clutter. There’s not 50,000 things you have to go through. It has a good interface and you’re getting exactly what you sign up for — a tailored threat intelligence feed. I immediately noticed how easy it is to use.”  

- Jaxon Melton, Cybersecurity Lead at CorePlan

Results: 100s of emails down to just 1

Since using Fletch, CorePlan has achieved and maintained ISO27001 and SOC2 compliance. 

With Fletch, they’ve refined their cybersecurity efforts,  optimized operations and reduced complexity.

Today their process involves checking the Fletch Daily Threat Report every morning for their correlated threats and utilizing Threat Boards on any threats of note for comprehensive threat data, actionable advice, and educational comms.

“Fletch simplifies things a lot because it’s one source-of-truth. You don’t have multiple news articles you’re referring to. You don’t have to worry about dodgy links or misinformation. You can build trust with the people at your company.” 

- Jaxon Melton, Cybersecurity Officer at CorePlan

Key Features and Benefits:

1. Daily Threat Report: Fletch’s Daily Threat Report, is now a staple in CorePlan’s cybersecurity routine and key to staying up-to-date on potential risks.

2. Forecast threats: Fletch’s Forecaster feed gives updates on threats targeting applications and services used by CorePlan, eliminating the need to sift through countless articles.

3. Easy Setup: Simple set up and ease of use proved to be a crucial factor for CorePlan in streamlining their operations.

4. Affordable: Fletch’s affordable pricing made it an obvious decision for CorePlan to get correlated threat intelligence.

Takeaway

For CorePlan, Fletch proved to be the perfect fit, providing a cost-effective solution that not only addressed their immediate cybersecurity challenges but also contributed to achieving and maintaining compliance. Fletch was made for businesses trying to achieve compliance and have a truly intelligent threat intelligence feed.