![\"Document-Security-blog\"](\"https:\/\/www.i-sprint.com\/wp-content\/uploads\/2023\/04\/Document-Security-blog-1024x630.jpg\" "\\"Document-Security-blog\\"")
<\/span><\/div><\/div>A recent news dated on 10th<\/sup> Mar 2023 from The Straits Times titled, The Big Story \u2013 Military Docs Leaked Online, where leaked confidential defence documents have been put up for sale online by hackers. The report states that at least 2 Singapore entities were listed in the leaked documents. Even though the leaked military documents do not contain current or any sensitive documents and is still under investigation. This news certainly brings us into thinking what can be done to secure these documents. Are there any Document Security solutions available?<\/p>\n What is Document Security?<\/strong><\/p>\n For any organisation, effective communications have to be made across all channels (from customers, employees to stakeholders) and most of the time it carries valuable and important information (which at times are classified or even confidential in nature). Due to this fact, we should be concerned on the very fact of how secure is this document? Is it safe from ill-intent parties?<\/p>\n Well, on this basis, document security, sometimes known as document access security, are dedicated security procedures that are put in place to deter data manipulation and reproduction of critical or strategically important documents that can be shared safely internally and externally.<\/p>\n What are the common practices?<\/strong><\/p>\n The usual practices that were adopted, including password protection, provide only secured document sharing links to intended parties. But is this enough? Are we able to secure our document in this way?<\/p>\n Therefore, to determine if our documents are actually secure, let us take a look at the life cycle of a few documents security requirement to see if our documents are in a secured state at this point of time.<\/p>\n The life cycle of a document revolves around 3-stages: processing, transit and storage. Documents will be at risk if access approvals and audits are not in place. Though we can send documents to the intended party, but documents can be hijacked while in transit. In storage, we can always set password implementation on the user access but unfortunately most of the time hackers can easily \u201cpass through\u201d this protection and when they do, they have full access to all of our documents.<\/p>\n When we understand the lifecycle of a file, we can then observe what can be done to greatly improve the data security of our documents.<\/p>\n ABAC (Attribute Based Access Control)<\/strong><\/p>\n Digital transformation has greatly created new ways to work smarter and faster regardless of location and time. Also, with the increased needs of collaborating on and sharing sensitive or classified information, new security risks and problems have evolved and need to be resolved.<\/p>\n One of the possible threat vectors could possibly be \u2013 insiders. According to a report by Ponemon Institute published in 2020, globally the cost of insider threat which involves negligent employee or contractor accounts for up to 62% of security incidents with malicious insiders contributing another 23%. Hence, data security that addresses insider or external threats is paramount for enterprises, government, defence industry, research, intelligence as well as supply chain collaboration.<\/p>\n Traditional security tools are focused on protecting systems from external threats. To address insider threats a new security model is needed that focuses on directly protecting what is at stake \u2013 DATA<\/strong>.<\/p>\n Hence, Attribute Based Access Control (ABAC) is the solution.<\/p>\n Why ABAC?<\/strong><\/p>\n Attribute Based Access Control (ABAC) is a Zero-Trust, data-centric security model that uses dynamic policies to control who accesses information and under what conditions.<\/p>\n With an ABAC-enabled solution, policies can be based on any combination of user attributes, content and environment attributes. This methodology allows the governance and security teams to create policies that dynamically adjust access, usage and sharing rights based on real-time comparison of user context and file content to enforce regulations and policies.<\/p>\n ABAC policies will ensure only the right people can access the right information at the right time.<\/p>\n<\/div>\n<\/div> How does it work?<\/strong><\/p>\n The ABAC model uses attributes like document, user and environment values. A dictionary of attributes is created to build precise access control and data protection policies. A policy is then setup to determine the access rights to the document. By using the combination of the various attributes, we can set forth the access policy to the document and hence enhancing the security of the documents.<\/p>\n Application of ABAC<\/strong><\/p>\n In summary, a good document security should adopt the ABAC policy to determine the access rights to the document. With ABAC methodology in mind, I-Sprint partnered with archTIS, a global provider of innovative software solutions for the secure collaboration of sensitive information and its award-winning data-centric information security solutions to protect the world\u2019s most sensitive content in government, defence, supply chain, enterprises and regulated industries through attribute-based access and control (ABAC) policies.<\/p>\n Our Secured Document Solution includes the following functionalities:<\/p>\n These functionalities are getting wider recognition in important and strategic areas such as Government, Defence, Financial Services, Critical Infrastructure, Healthcare and Legal.<\/p>\n Talk to a specialist today to learn more.<\/p>\n<\/div>\n<\/div>![\"document-security-abac\"](\"http:\/\/www.i-sprint.com\/wp-content\/uploads\/2023\/04\/document-security-abac.png\" "\\"document-security-abac\\"")
<\/span><\/div><\/div>\n
\n
\n
\n
\n
\n
\n
\n