IBM FileNet and Seclore FileSecure presentation

Seclore Filesecure
FileNet Connector
Enhancing security of IBM FILENET

Contents
Constraints of IBM FileNet security
The Solution ..
What is Seclore FileSecure
Seclore FileSecure connector for IBM FileNet
Policy definition
Assigning policies to FileNet folders
Uploading documents
Downloading a file from FileNet folder
Accessing a protected file
Audit trails
About Seclore

A Process Flow of Product Plan
FileNet and security
FileNet
User
User
Edited
Copied
Printed
Viewed
Distributed
Un-protected File
FileNet accessed by users
FileNet security is not persistent . Once the file is downloaded locally, it can be edited, copied & distributed.

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

Seclore FileSecure allow enterprises to define, implement & audit information usage “policies”. A “policy” defines :
WHO can use the information
People & groups within and outside of the organization can be defined as rightful users of the information
WHATcan each person do
Individual actions like reading, editing, printing, distributing, copy-pasting, screen grabbing etc. can be controlled
WHEN can he use it
Information usage can be time based e.g. can only be used by Mr. A till 28th Sept OR only for the 2 days
WHERE can he use it from
Information can be linked to locations e.g. only 3rd floor office by private/public IP addresses
SecloreFileSecure

SecloreFileSecure
Policies are
Persistent: Implemented on information and all its copies wherever it is transmitted or stored
Dynamic: Policies can be changed after distributing information without having access to or redistributing the information
Policies can be attached to information on
Creation
Placement in a certain location e.g. shared folder
Attachment to email
Uploading to a document management / ECM system
…

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

A Process Flow of Product Plan
Seclore FileSecure Enabled FileNet
FileNet + Seclore FileSecure
User
User
Edited
Copied
Printed
Viewed
Distributed
Protected File
FileNet
accessed by users
Files copied out of “FileNet Folder” are persistently protected. Rights to edit, copy, print and distribute are restricted based on Seclore FileSecure policies

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

Policy definition–WHO, WHAT
10
Policy Admin
People / groups, within / outside the enterprise can be dis-allowed to edit, print, copy, forward etc. via a policy

Policy definition–WHEN, WHERE
11
Policy Admin
A policy can expire information beyond a date / timespan and also restrict its usage to certain computers / networks

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

Applying Policies…
13
FileNet
Admin
Policies can be applied to folders by the FileNet admin. The admin chooses the folder …

14
FileNet
Admin
Policies are applied…
…Applying Policies

15
Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

16
FileNet
Admin
Add document
Add document…

17
FileNet
Admin
Add document
…Add document

18
FileNet
Admin
Document is uploaded
Document is uploaded

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

20
Download document from FileNet…
User’s Computer
Once the user’s downloads the document
from Seclore FileSecure policy protected FileNet folder the file gets instantly protected

…Download document from FileNet
21
Downloaded document
from FileNet.
Notice the red lock!
User’s Computer
…file gets instantly protected

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

Rights display
23
User’s Computer
On clicking a rights display makes the recipient explicitly aware of his rights to the document

Unauthorized print
24
User’s Computer
Unauthorized activities like attempts to print …

25
User’s Computer
… are disallowed
Unauthorized print

26
User’s Computer
Unauthorized activities like attempts to edit & save…
Unauthorized edit & save

27
User’s Computer
… are disallowed
Unauthorized edit & save

28
User’s Computer
Unauthorized copy
Attempts to copy parts / whole of the document …

29
User’s Computer
… are disallowed
Unauthorized copy

30
User’s Computer
Screen capture by the PrtScr key, screen grabbing tools like Camtasia and screen sharing tools like Webex is blocked
Unauthorized screen grab

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

32
User’s Computer
The audit captures the WHO, WHAT, WHEN and WHERE of the access attempt. Authorized and unauthorized attempts are captured and reported
Information audit

Contents
The Solution ..
Policy definition
Uploading documents
Audit trails
About Seclore

Corporate Background …
“Seclore is a high growth software product company. Seclore’s technology helps mitigate the risks arising out of information breaches whilst enhancing collaboration”
6 years old, Headquartered in Mumbai, India
Promoted by IIT Bombay under the SINE program - www.sineiitb.org
Geographical and customer presence in Middle East, ASEAN, SAARC & Europe
Offerings focused on Information Rights Management and Secure Outsourcing
Stake holders including
IIT Bombay – www.iitb.ac.in
ICICI Bank – www.icicibank.com
Ventureast – www.ventureast.net
Technology and service differentiators focusing on minimally intrusive technology, value based pricing and usage without training

About …
Value to customers
Security without compromising on collaboration
Customers across
….Diversified business groups
….Large financial services groups
….Engineering and manufacturing organizations
….Defence, Software, BPO, Consulting, Services, ….

What customers say about us …
“We chose Seclore FileSecure due to the flexibility provided by Seclore in terms of solution capabilities and customization. Implementation of Seclore FileSecure has reduced the exposure of critical data for potential misuse or frauds. The business benefits are tremendous.”
- Murli Nambiar, Head of Information Security
"Financial services companies like banks, insurance carriers & broking are ‘opening up’ their information systems and processes for participation by customers, partners and vendors. This of course brings in a lot of value chain integration and lowers costs but comes with information security needs which cannot be solved by present day systems. Seclore’s technology for securing documents as they flow within and outside enterprises as well as securing data shared with outsourcing partners is extremely relevant.
- C N Ram. Group CIO, Essar group

What industry experts say …
Seclore’s approach is different in that they not mandatory rely on such plug-ins but mainly act “below” the application. The client component (which is required to access protected, e.g. encrypted, documents) tries to analyze the activities off the application like access to the file system. One impact of that approach is that a document might be opened with different applications supporting the specific document format.
- Martin Kuppinger, One of the fore-most information security analysts
“Information breaches normally result in intellectual property violation which is a serious problem affecting industry today. Seclore’s combination of preventive and corrective methods of handling information breaches is invaluable to any industry”
- Haigreve Khaitan (Managing partner – Khaitan and Co)
“Collaboration, security and privacy appear as mutually conflicting goals with most present day technologies. Seclore has resolved this conflict in a very elegant manner with its technology.”
- Animesh Parihar (Global Delivery Head – SAP)

Deloitte Technology Fast 50 is a ranking compiled every year based on percentage of growth of fiscal year revenue over three years. The companies must also fulfil other criterion of technology orientation.
‘Hidden Gems’ 2010 by Kuppinger Cole, Europe’s leading information security analyst firm is a report which lists vendors, which have a significantly differentiated offering and are market leaders in a particular segment.
Awards and recognition …

… Awards and recognition
The TR35 award is for innovators whose inventions and research, Massachusetts Institute of Technology (MIT) finds exciting. Technology Review, owned and published by MIT, is the world’s oldest technology magazine.
“Innovations – ideas in practice” is an annual event honoring researchers and innovators for creative and innovative work in the sphere of science and technology. The innovation needs to have a high degree of practical relevance to change everyday life.

More Info?
www.seclore.com
+91-22-4015-5252

http://www.seclore.com	132
http://seclore.com	19
http://www.linkedin.com	9
http://www.slideshare.net	4
url_unknown	3
http://www.seclore.de	1
http://127.0.0.1:4664	1

IBM FileNet and Seclore FileSecure presentation

by Seclore,India on Mar 11, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

7 Embeds 169

Statistics

IBM FileNet and Seclore FileSecure presentation — Presentation Transcript