Seclore File Secure Introduction Brief
Download as PPT, PDF3 likes1,121 views
Seclore FileSecure is an information rights management solution that allows enterprises to define usage policies for sensitive information. The policies control who can access shared information, what actions they can perform, when and where they can access it. This allows enterprises to securely collaborate both internally and externally while maintaining control over sensitive information even after it leaves their systems. The policies are persistent, dynamic and allow all user actions and policy changes to be centrally monitored through reports.
Seclore File Secure Introduction Brief
- 1. Introduction and presentation to CEVA Logistics &
- 2. About … Seclore is a high growth information security product company focused on providing Security without compromising collaboration Seclore’s flagship product Seclore FileSecure is used by More than 1.5 million users & some of the largest enterprises
- 3. Information exchange in the collaborative world Information is exchanged between Employees of the organisation Enterprise CUSTOMERS VENDORS Information is exchanged between employees & vendors & employees & customers What happens if an employee with privileged access leaves to join a competitor ? What happens if information shared with a vendor is lost by the vendor ? VPN SSL UTM Firewall … TELEMARKETER Competitors Firewalls
- 4. Underlying Issues Share it = It becomes his (also) Ownership and usage cannot be separated Shared once = Shared forever Impossible to “recall” information Out of the enterprise = Free for all Technology & processes are only applicable within
- 5. The Result Information lands up in public websites !
- 6. Information lifecycle … Create Store Transmit & collaborate Use Archive & Backup Delete DLP Anti-virus Anti-… Hard disk encryption SSL UTM Application security IDM DLP Vaults Digital shredders Heterogeneous policies … Heterogeneous infrastructure Security Desktops Laptops Mobile devices Removable media Email Content Management Online workspaces Remote desktops Shared folders Removable media Instant Messaging Desktops Laptops Mobile devices Archive Backup Document retention
- 7. Options for securing unstructured information Option 1 : Control Distribution . . . Security Collaboration
- 8. Options for securing unstructured information Option 2 : Control Usage . . . Security Collaboration Right Location Right Time Right Action Right Person
- 9. Seclore FileSecure WHO can use the information People & groups within and outside of the organization can be defined as rightful users of the information WHAT can each person do Individual actions like reading, editing, printing, distributing, copy-pasting, screen grabbing etc. can be controlled WHEN can he use it Information usage can be time based e.g. can only be used by Mr. A till 28th Sept OR only for the 2 days WHERE can he use it from Information can be linked to locations e.g. only 3rd floor office by private/public IP addresses Seclore FileSecure allow enterprises to define , implement & audit information usage “policies”. A “policy” defines :
- 10. Information Rights Management Policies are Persistent : Policies are implemented on information and all its copies wherever they are transmitted or stored Dynamic : Policies can be changed without having access to or redistributing the information Monitored : Policy changes can be monitored User actions are Monitored : Individual actions ( authorized AND unauthorized ) like viewing, editing, printing etc. are monitored and centrally available in a reporting tool
- 11. Information creation Maya’s Computer
- 12. Manual policy assignment Maya’s Computer
- 13. Policy definition – WHO, WHAT
- 14. Policy definition – WHEN, WHERE
- 15. Manual protection Owner of Document protects the file Maya’s Computer
- 16. Manual policy assignment Maya’s Computer
- 19. FileNet upload
- 20. Email send
- 21. Email send
- 22. Other options of applying policies Download of reports from transactional systems like ERP systems Extraction from business intelligence and reporting tools “ Discovery” by E-discovery and content aware DLP systems Pattern recognition Owner and format recognition ...
- 24. Collaboration Right Location Right Time Right Action Right Person organization
- 25. Collaboration - within Research Dept. Maya Research Associate Neal Research Associate Head Research
- 26. Recipient – within the enterprise Neal’s Computer
- 27. Rights display Neal’s Computer
- 28. Unauthorized print After a user “accepts” the policy is when the actual content is shown to him/her Neal’s Computer
- 29. Unauthorized print Neal’s Computer
- 30. Unauthorized copy Neal’s Computer
- 31. Unauthorized copy Neal’s Computer
- 32. Unauthorized screen grab Neal’s Computer
- 33. Recipient – within the enterprise One more users receives File Head Research Computer
- 34. Rights display This user has full control of document Head Research Computer
- 35. Collaboration - outside Policy admin Head Research Distributes files to other Internal Employees and External Users Research Dept. Maya Research Associate Neal Research Associate Head Research Head - Marketing Head - Finance Head - Legal External reviewer
- 36. External user identity management
- 37. Recipient - outside External Reviewer's Computer
- 38. Explicit authentication External Reviewer's Computer
- 39. Unauthorized save External Reviewer's Computer
- 40. Unauthorized save External Reviewer's Computer
- 41. Information audit Maya's Computer
- 42. Information audit Maya's Computer
- 43. Forensics Maya's Computer
- 44. Owner (Maya) Redistributes the File with New Policy Maya’s Computer
- 45. Old policy Old Policy Definition Maya's Computer
- 46. Old policy Old Policy Definition Internal Users External Users
- 47. New policy New Policy definition Maya's Computer
- 48. New policy Internal Users
- 49. Orphaned copies of information External Reviewer Still has a file on his desktop External Reviewer's Computer
- 50. Policy control message External Reviewer's Computer
- 51. The default disclaimer External Reviewer's Computer
- 52. Key criteria in evaluating IRM for Ceva Format and application support Integration-friendliness around existing IT infrastructure Identity systems Transactions systems Reporting and BI tools ECM systems Auditing capabilities External user identity management Mature policy management and consulting services Licensing model User based / Protector based
- 53. Thank You Website : www.seclore.com Blog : blog.seclore.com Phone : +91-22-4015-5252