Translated from 日本語 • View original Hello! This is Tsutsumi, a sales representative at Colorkrew Security.
Under the service name Colorkrew Security, we provide SOC services in cloud areas such as AWS and Azure, as well as so-called zero trust areas such as EDR and CASB.
This time, all the members involved in Colorkrew Security held a one-day training camp, so I would like to report on the situation.
What is the training camp for?
In a word, this is a training camp to reorganize "What is Colorkrew Security?"
Currently, Colorkrew Security is in the expansion phase of its business and is actively working to secure additional projects and recruit people. In order to deliver services to more companies, we believe it is important to have a media strategy and service materials in place, and to clearly communicate the value of Colorkrew Security. However, if you do not organize the core of the service, "What is Colorkrew Security?", no action will be effective. Therefore, we planned this training camp because we thought it was necessary to reorganize this theme and unify the awareness of the whole team.
At Colorkrew, we often hold training camps to gather face-to-face like this to think about one thing and discuss one thing.
In our daily work, we often don't have time to tackle long-term issues and end up leaving them alone. That's why Colorkrew recommends training camps where you can have in-depth discussions on your projects. Not only does it tackle big topics, but it also helps strengthen team bonds.
What did they do?
Two Colorkrew Security business leaders and sales leaders discussed "What is Colorkrew Security?" from various angles.
Here is an example:
- Segmentation of targeted customers
- Industry and Industry
- Company size
- Deployment
- Region, area
- Growth stage of the company
- Business Description
- Our strengths
- The value Colorkrew Security provides to its customers
I talked for about 6 hours from 13 to 19 o'clock.
We cannot disclose all of the content of the discussion, but we will introduce our company's strengths, which is one of the themes of the talk.
Your Strengths
It's the abundance of security products it handles.
(Quoted from the Colorkrew Security page)
In many cases, other SOC vendors only support a small number of products, such as only Microsoft 365 security products and Cybereason EDR. Also, even if you can support multiple products, in most cases, the logs and alerts from those products are independent for each product and are not linked.
However, as shown in the image above, Colorkrew Security handles a wide range of products, and it is possible to monitor the logs from various products in an integrated manner.
What are the benefits of integrated monitoring?
Even if it is just a log on its own or not very important, it is possible to conclude that it is a single activity by associating logs and alerts from multiple products.
A specific example is the linkage between audit logs (logs of who did what and when in the system) and PC operation logs of SaaS products.
For example, for the purpose of taking out information, Mr. A "downloads a file in Onedrive, then renames the file locally, and then uploads the file with Dropbox and shares the file externally."
In that case, the following logs are generated:
- Onedrive file download log
- Local file name changelog
- Dropbox file uploads, file sharing logs
At this time, if each log can only be viewed on its own, then these are just independent logs and do not give any meaningful indications.
Only by analyzing these together can we hypothesize that "Mr. A is trying to take internal data outside the company."
Colorkrew Security has developed such analysis logic in-house to provide customers with meaningful security-wise monitoring.
What Lessons Gained?
In fact, this training camp started with the premise that "what is Colorkrew Security?" is very different between the two business leaders and sales leaders of Colorkrew Security. When we actually discussed it, of course, there were many similarities, but there were also many differences, and it was a training camp where we gained a lot of insights, wondering if that was what we thought. And I think it means a lot that we were able to talk about it face-to-face with all the members involved in Colorkrew Security.
This time, members from different occupations such as sales, engineering, and marketing have gathered, and we are proud of our close communication and open team. Nevertheless, there were many discoveries about whether they thought so, and I realized that even if it seems that we are able to exchange opinions on a daily basis, there may be a fundamental gap in understanding. I felt that it was necessary to be aware that daily conversations were not limited to just sharing information, but also led to essential understanding.
By setting up regular off-site meetings, as in this training camp, we can detect discrepancies in perception at an early stage. I realized that it is important to provide opportunities to confirm common understanding and devise ways to deepen common understanding.
Conclusion
Colorkrew Security is expanding its business at breakneck speed and is looking for people to expand with us.
If you are interested, please feel free to contact us here (https://recruit.colorkrew.com/recruit/).