Coulee Bank Chooses HanaByte for Security of Microsoft 365 and Entra ID
Executive Summary
Following a security incident, family-owned Coulee Bank engaged HanaByte to evaluate the security of their Microsoft 365 and Entra ID tenant. HanaByte conducted an assessment aligned with FFIEC and CIS Level 1 Benchmarks utilizing automated and Microsoft-native tools. We provided a thorough assessment report with actionable remediation guidance to Coulee Bank.
About the Customer
Coulee Bank is a family-owned community bank that’s been around for 60 years. As a small business, they serve the unique needs of their customers through knowledge of the local market and focus on relationships and service built on trust and responsiveness.
Why Microsoft
Coulee Bank chose Microsoft 365 and Entra ID because of the comprehensive suite of Software-as-a-Service (SaaS) products with direct and seamless integration capabilities. Businesses like Coulee Bank benefit from a suite of tools that ranges from productivity and email to CRM and process automation, all available as SaaS or Platform as a Service (PaaS) solutions with infrastructure and scaling fully managed by Microsoft. This leaves the business free to focus on what matters most to its mission.
The Challenge
When Coulee Bank encountered a security incident, they found HanaByte and engaged the firm to assess the Microsoft 365 and Entra ID posture for their organization. When they encountered a Business Email Compromise, Coulee knew they needed to reach out to an experienced cybersecurity organization to reduce the likelihood of a future incident and further ensure the impact of any such incident is greatly reduced.
Services Provided
Microsoft Office 365 Active Directory / Entra ID Microsoft Purview Microsoft Teams Microsoft Sharepoint
Why HanaByte
Coulee Bank chose HanaByte for this assessment because of our expertise in cybersecurity and cloud services. Their need for a quick turnaround led them to HanaByte, who can automate much of the process and provide actionable guidance.
Partner Solution
HanaByte conducted an assessment of the environment with internal tools that allowed us to quickly determine the current security posture. After gathering the environment posture, HanaByte was able to quickly prioritize findings and translate that into actionable guidance for remediations for the technology.
HanaByte also used Microsoft-native tools like Purview Compliance to provide structure to our assessment of People and Processes as well. This allowed us to provide actionable guidance using built-in frameworks for the Federal Financial Institutions Examination Council (FFIEC) and Center for Internet Security (CIS) Level 1 Benchmarks, and provide the customer with a dashboard for tracking compliance.
Results & Benefits
The remediation guidance that HanaByte provided to Coulee Bank encompassed people, processes, and technology, the three components necessary to ensure a secure and compliant environment. Following these recommendations allowed Coulee Bank to not only recover from their incident, but also improve their overall security posture from email security to identity and access control.
About the Partner
HanaByte is a cloud security consultancy focused on compliance automation based out of Atlanta, Georgia. We are a remote-first consulting firm, working with cloud-native technologies and processes on Amazon Web Services and Google Cloud.