Seclore

Hi Puneet ... Relevant points and here is what we ...

2012-05-18T15:30:30.670+05:30

Hi Puneet ... Relevant points and here is what we believe :

1. Structured data is outside of the ambit of IRM though a lot of time there is conversation of structured data to unstructured e.g. ERP system exporting reports where of course IRM is useful.The assumption of data owners applying rights is not universally true and not true in all cases specifically for Seclore FileSecure.

2. The reclassification thing is again IRM product specific. For Seclore FileSecure reclassification is possible manually or automatically if content inspection is enabled for the E-discovery tool in DLP.

3. On Bulk rights assignment we have a different view. In MOST cases assignment of rights based on network share locations is more accurate than trying to inspect content and apply heuristics based classification. Loads of type 1 and type 2 errors there.

4. Format and application dependence of course is a challenge with IRM technologies in general but have you looked at Seclore FileSecure recently ? Write to us and we can have a conversation.

The Seclore Team

Nice post, here are few queries on IRM and DLP wor...

2012-05-18T11:52:15.725+05:30

Nice post, here are few queries on IRM and DLP working together may have potential issues.

1. IRM works on Data Encryption with Data Owners defining access rights on unstructured data (wht abt Structured data?)?

2. Data Discovery is a continuous process so confidential data once discovered and IRM rules applied, can the same data be re-classified or does it require providing Access rights to E-discovery tool in DLP?

3. Bulk Right Assignment through IRM policy server on network shares/file servers or even endpoints may not be a good idea. Right Assignment has to ideally be on Content inspection (Data centric Policies) and to a limited extent context based.

4. One of the biggest challenges which remain with IRM is the increasing number of supported file formats.

DLP or IRM or both the Data security is a much bigger challenge and needs careful planning and execution at infrastructure, Data management, perimeter security and most important Governance controls.

problem = difficulty in using/ working with data c...

2012-05-03T14:18:18.000+05:30

problem = difficulty in using/ working with data coz of too much security in place

Dear Phantom ... Of course, that is a problem wit...

2012-04-23T19:37:18.819+05:30

Dear Phantom ...

Of course, that is a problem with every solution .. But in this case we are not talking about the problem of learning how to drive, the problem is the pollution caused by the car ..

Problems this solution may create - adoption and u...

2012-04-23T18:56:55.727+05:30

Problems this solution may create - adoption and use of IRM in business process.

Hi Nitin, Thanks for your feedback..its very enco...

2011-11-22T14:24:30.662+05:30

Hi Nitin,

Thanks for your feedback..its very encouraging and keeps us motivating.

Thanks,
Ritu Pande.

Really very helpful article.. Thanks for sharing ...

2011-11-21T12:23:49.096+05:30

Really very helpful article..

Thanks for sharing your knowledge and its my request to update your precious article time to time as its
very helpful for me as well as for others !!

Really a very helpful article.... Thanks for shar...

2011-11-21T12:21:38.172+05:30

Really a very helpful article....

Thanks for sharing your knowledge and its my request you to please update your articles time to time and giving such precious article so me and others can improve their knowledge...

very nice for health oriented details thanks for s...

2011-11-01T15:42:15.156+05:30

very nice for health oriented details thanks for serving health services

a lesson learned from the blog - "limit your ...

2011-08-30T15:44:21.164+05:30

a lesson learned from the blog - "limit your ideas to few ppl using IRM" - good read :)

Hi Vipin, Rule 8 states that every entity to whom...

2011-06-20T12:32:12.997+05:30

Hi Vipin,

Rule 8 states that every entity to whom these "Reasonable security practices and procedures and sensitive personal
data or information" rules are applicable would be required to adopt reasonable security practices. Further, Rule 8(4) goes on to state that if a corporate has implemented ISO 27001, they would be deemed to have adopted these security practices (of course, subject to audit). Therefore, it makes sense to get a ISO27001 certification to ensure compliance.
- Shivangi Nadkarni

Applying the same rule, can you also comment on ru...

2011-06-16T16:26:48.553+05:30

Applying the same rule, can you also comment on rule 8 and its implementation? Is a body corporate specifically required to get IS/ISO/IEC 27001 or a similar comprehensive policy, which is approved by the central govt suffice? Would be much obliged if you could respond to vipings@yahoo.co.in

Thanks
Vipin

I think I had a glimpse of what you suggest in for...

2011-06-15T22:29:00.339+05:30

I think I had a glimpse of what you suggest in form of Adobe's Secure PDF Files when I downloaded HBS (Harvard Business School) Case Studies as part of an MBA Level Corporate Finance course from UG21 of Singapore, in 2007-2008. The File had restrictions on how many times I could open, copy, print it; and was only accessible via a special userid/password sent to me by UG21. Probably it would have self-destructed if I had forwarded it but not sure as I didn't test that part :) !. Was it likely something they would have incorporated using Seclore technology ? And are you suggesting similar level of security or something more/ different? Also, is it not possible to extend DRM concepts to such files/ documents, Y do we need to have a new concept as IRM and make it more confusing for users. After all documents can be considered as subset of Media.

Thanks,
Susheel

Hmmm, interest post on information security. It...

2011-03-24T02:47:51.194+05:30

Hmmm, interest post on information security. It's tough to have a completely secure network or environment. The Mumbai attacks should be a wake-up call for everyone.

This is a really useful post. I’ve found them ver...

2011-02-28T15:50:17.708+05:30

This is a really useful post. I’ve found them very useful. Now I can use it like a college boardhelp ;). Thanks

hey

2011-01-18T15:19:02.123+05:30

hey

Thanks for sharing this very interesting post.

2011-01-06T14:49:17.595+05:30

Thanks for sharing this very interesting post.

Peter, Appreciate that to some extent I agree. The...

2010-10-08T15:14:18.195+05:30

Peter, Appreciate that to some extent I agree. There is a thin line between "weakness" and "limitation" and what I really meant was limitation.

I think this post is kind of a continuation of an earlier one with the title "DLP: Necessary but not sufficient". The applicability of DLP controls is within the enterprise and on a yes/no basis and IRM overcomes these limitations by providing control outside and increasing granularity.

Ritu you said "Effective Information Right...

2010-10-05T13:17:12.251+05:30
Ritu you said "Effective Information Rights Management (IRM) systems provide the solution to plug the weakness in a DLP system". I am not sure that DLP has a weakness in the way you described it, because someone from a DLP orientation can also describe IRM as having a weakness too.

Both DLP and IRM are becoming more and more complimentary technologies that complete an organisation's endpoint security strategy and should be perceived as so.

Not only did was this posted on http://www.engadge...

2010-09-02T05:04:33.660+05:30
Not only did was this posted on http://www.engadget.com/2010/04/05/hp-slate-to-cost-549-have-1-6ghz-atom-z530-5-hour-battery/ But it is on the Slate Blogs on the HP site itself! Ummmm. Posted back in April!!! Thanks for getting my hopes and blood pressure up for nothing!!! Grrrrr.... I am so ready for HP to release the Windows 7 version of the HP Slate!!!! Please drop it on us now!!!!

Thanks Janice .. will do.

2010-07-02T09:03:40.847+05:30
Thanks Janice .. will do.

Hi Vimal .. we agree and therefore prevention is t...

2010-07-02T09:01:26.562+05:30
Hi Vimal .. we agree and therefore prevention is the only cure for this ..

Agree completely here .. but people / process and ...

2010-07-02T09:00:11.620+05:30
Agree completely here .. but people / process and technology have to go hand in hand ..

Pleasure !

2010-07-02T08:57:06.441+05:30
Pleasure !

Thank you for sharing this information on the impo...

2010-07-01T12:16:44.345+05:30
Thank you for sharing this information on the importance of practicing data security measures.