Yellow Capital

BACKGROUND

Please describe your company and position.

I am the FOUNDER of REBSEA-Real Estate and Business Social Enterprises Association

Describe what your company does in a single sentence.

REBSEA (Real Estate and Business Social Enterprises Association) connects socially responsible real estate professionals and businesses with community-focused initiatives to promote charitable giving and sustainable practices.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Yellow Capital to accomplish?
Our primary objective in hiring Yellow Capital was to conduct a comprehensive external penetration test of our systems and evaluate our security protocols through social engineering. 
As an organization dedicated to supporting socially responsible real estate and business practices, safeguarding sensitive data and maintaining the trust of our partners were top priorities.

SOLUTION

How did you find Yellow Capital?

• Online Search
• Referral

Why did you select Yellow Capital over others?

• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Yellow Capital were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Yellow Capital began the engagement by clearly outlining the stages of the project, which included:

• External Infrastructure Testing: They thoroughly analyzed our external systems for vulnerabilities.
• Internal Infrastructure Testing: They worked with us to identify potential gaps within our internal networks.
• Web Application Testing: Their team assessed our platforms and applications for weaknesses.
• Social Engineering: This phase involved testing our employees' awareness and susceptibility to phishing or other manipulative tactics.

Throughout the process, they maintained close communication, providing updates at each milestone. At the conclusion of the project, they delivered an extensive report and a final presentation summarizing their findings, along with actionable recommendations for remediation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Their work highlighted several vulnerabilities that we had previously overlooked, giving us clear priorities to address. Most notably:

• Improved Focus: Their analysis helped us pinpoint specific areas where we needed to enhance our security measures.
• Employee Awareness: The social engineering tests served as an eye-opener for our team, demonstrating the importance of vigilance in cybersecurity.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yellow Capital’s project management was exceptional. They used Slack for consistent communication, ensuring that any inquiries or clarifications from our team were addressed promptly. 
Deliverables were provided on schedule, and their updates kept us well-informed throughout the project.

What was your primary form of communication with Yellow Capital?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We were particularly impressed with their flexibility and the depth of expertise their security specialists demonstrated. They tailored their approach to suit our organization’s specific needs, making the process efficient and highly impactful.

Are there any areas for improvement or something Yellow Capital could have done differently?

While I found the social engineering phase to be a bit invasive at times, it effectively underscored the importance of employee education in cybersecurity. In hindsight, it was a valuable part of the overall assessment.