www.seclore.com

Microsoft SharePoint

Microsoft SharePoint provides a user friendly integrated file sharing and enterprise content management system. SharePoint deployments usually become central repositories of information, a lot of which is confidential. The central repository also becomes a central point of failure for data breaches. A large number of these data breaches happen when information downloaded from SharePoint is forwarded, using other means, to unauthorized recipients.

SharePoint provides granular control over who can access each piece of content. The controls govern who can view, download and upload the information within SharePoint. The controls unfortunately do not extend to content once it is downloaded from SharePoint. SharePoint's security is limited till the time the information is within SharePoint. Once the information leaves SharePoint and comes to desktops, laptops or mobile devices, then SharePoint's security policies are not effective on the information.

Seclore FileSecure extension for Microsoft SharePoint extends the scope and reach of security policies defined within SharePoint. Using the extension enterprises can secure documents, images and even drawings when they are downloaded from SharePoint. Seclore FileSecure enables enterprises and individuals to:

1. Define Information Usage Policies
A usage policy defines:
WHO can use the information i.e. people / groups within or outside of the enterprise
WHAT can each person do with the information i.e. read / edit / print / distribute / copy
WHEN can each person access the information i.e. within certain dates, within a timespan
WHERE can the information be accessed from i.e. specific computers, within the office.

2. Attach Policies To Individual Libraries within SharePoint
This is done using the interface integrated within SharePoint itself

3. Control Usage Of The Policy Governed Information
Information downloaded from SharePoint is automatically protected by the Seclore FileSecure extension for Microsoft SharePoint. This information can only be used in compliance to the policies defined.
The policy attached to the information can be even changed post download i.e. the "owner" can change WHO/WHAT/WHEN/WHERE and the usage policies of information already downloaded from SharePoint will also change automatically to reflect the new policy.

4. Audit The Usage Of The Information.
Information protected with Seclore FileSecure can not only be controlled for usage, it can also be audited. WHO used the information, WHAT did he/she do, WHEN & WHERE is captured from distributed usage environments even outside of SharePoint and reported centrally.
These audit reports can be sliced and diced using a report builder and can be used in compliance reporting for frameworks like ISO 27001, Sarbanes Oxley, GLBA, PCI DSS & HIPA