Coconala Uses Netskope to Visualize Data Flow and Prevent Information Leaks

“We went public in March 2021, but at that time we were a so-called ‘one-man IT department.’ We didn’t have many systematic measures for information security, and although we had measures in place to deal with the risk of information being removed, lost, or stolen, we thought there was room for further improvement to achieve a higher level.”

In addition, the lack of security experts in the IT department prevented coconala from taking a planned approach to security, resulting in a reactive, problem-driven response that addressed issues as they arose.

In order to clarify the problems, Kawasaki first broke them down into smaller parts, such as “What is the goal of security?”, “What are the problems?”, etc., and proceeded to sort them out. As a result, they found that measures against unauthorized removal, theft, and loss of information were individually optimized and that there was room for further improvement.

“For example, there were strict internal rules against sending information attached to emails to personal email addresses or uploading internal data to personal Google drives, but there was room for improvement in terms of visualizing and logging removal activities.”

Although the POC revealed issues such as PCs and networks becoming slower than expected, they were able to resolve each issue one at a time with the help and support provided by Netskope.

“We compared and reviewed the products from around March to April 2022, and selected Netskope in May. We then ran the POC from June to September,” explains Kawasaki.

In terms of specific quantitative benefits, Kawasaki cites “detection and prevention of inappropriate information uploads and downloads. After implementing Netskope, we detected several near misses that we were able to prevent. Netskope detects and alerts us about near misses, so we can conduct individual interviews and take appropriate action, such as giving permission or providing guidance, for each case.”

Kawasaki cites “a sense of safety” as a qualitative effect. “By combining with EDR, we have been able to implement multi-layered protection against malware. Even if the EDR agent file is not updated, the fact that we can implement multi-layered protection is a great source of security in terms of anti-virus measures.

Kawasaki also feels that another major benefit is that “we can gain a lot of insight” through Netskope’s support, as well as by sharing information with other companies that have also implemented Netskope and by participating in user groups.

“By quickly following the latest architecture, Netskope allows us to provide our employees with higher-performing PCs. As a result, development productivity increases, and this also strengthens our competitiveness,” says Kawasaki. The company will continue to use Netskope to improve the IT convenience of our employees.