As the very first client of Divvy Cloud with over 7 years of experience, implementing the tool at scale in the enterprise environment and working with clients all over the world, the NephōSec team has the experience needed to help you set up and run the tool, adopt it across your organization and get the most value out of the investment that you have made in securing your cloud.
DivvyCloud Acceleration Program is a white glove service that provides customized engagement for the individual client. Depending on the scale of the organization, they typically last 30-90 days.
Engagements typically include:
•Software installation, setup, and tuning completed it in a way that enables easy future upgrades
•Data harvesting across all defined cloud accounts
•Set up users and organizations to get visibility across clouds
•Unifying how clouds and resources are tagged and implemented
•Identifying the right compliance framework to ensure that clouds are secured in a way defined
by your individual business
•Training the organization on tool usage and driving cultural change that ensures cloud security
•Setting up automated remediation, to take this workload off your team. This automation not
only analyzes and identifies issues, but can execute the desired action(s) to autonomously
notify the team and/or remediate issues before they become a problem
•Deploy DivvyCloud •Setup Authentication Method & Administrators •Validate all Roles, Policies, & Associated Cloud Permissions •Ingest your Initial Accounts •Initial System & Health Checkpoint •Adjust Harvesting Strategy if Needed
•Train End-Users to Work with DivvyCloud •General Training Sessions to Cover Entire Product Suite •Specialized Training Sessions Tailored to Specific End-Users •Use-Case Workshop
•Focus on Identified Compliance Posture/Framework •Adjustments Made to Harvesting Strategy if Needed •Deploy Best Practices DivvyCloud Custom Pack •Report Initial Compliance Findings •Identify Custom Insight Requirements Based on Use-Cases
•Identify Tagging/Badging Strategy •Create Custom Insights to Identify Resources in Violation of Tagging/Badging Strategy •Report Tagging Strategy Usage
•Create Custom Insights & Assign to Custom Packs per Use Cases •Monitor Compliance of Insights Over Time •Review Compliance Scorecard
•Identify up to 4 areas of integration to existing systems •Examples: Slack, ServiceNow, Splunk, Jira, Teams, PagerDuty and Tenable
•Check Progress Since End of Engagement