My SharePoint Rights Management Wish List

By Yann Lejas, Director of Sales Engineering at NextLabs |

Most enterprises are using browser-based applications, such as Microsoft SharePoint, to store and share documents and files with their colleagues, business partners, and customers. This platform presents certain advantages: it makes information easy to share and quick to transfer. Digital documents can be accessed anywhere, any time and from pretty much any device. more “My SharePoint Rights Management Wish List”

Is this the Right time for Rights Management?

By E.K. Koh, VP of Solutions at NextLabs

It depends on whether you believe the analysts.

In the report “Information Security Predictions and Recommendations 2014”, Kuppinger Cole recommends that enterprises “Focus on strategic elements such as Information Rights Management for documents and Enterprise Key and Certificate Management (EKCM) for managing the secrets.” And, at the recent European Identity Conference, Kuppinger Cole identified Secure Information Sharing as a hot topic, by calling out Rights Management as an enabler. [Source: EIC 2014: Trends and Hot Topics, Kuppinger Cole, May 2014] more “Is this the Right time for Rights Management?”

SharePoint 2014 Key Security Takeaways – Our Top 5

By Mandy Pang, Senior Product Manager

SharePoint 2014 Key Security Takeaways – Our Top 5

  1. The conference attendees were buzzed on Attributes.  Specifically, attribute-based security models for SharePoint.  Role-based models are no longer making the cut – they leave collaboration vulnerable.  Attribute-based solutions have fine-grained control.
  2. Clouds, of course was big, even bigger was the topic of protecting data in-transit to/from cloud and at rest in the cloud.  Securing Office 365 was another hot topic.  There was a great deal of discussion around the need for comprehensive end-to-end protection of intellectual property while satisfying the regulations set forth by a company’s compliance office.  If the data or IP was to be accessed by or transmitted to an employee or contractor outside of the company’s firewall, then concern was expressed on how to safeguard the data.
  3. SPC14 was global with a good portion of attendees coming from Europe.  Interestingly enough, a lot of European companies are looking to the U.S., particularly Silicon Valley, for solutions on automated information rights management.
  4. The architects, developers, and I.T. leaders with which I spoke were eager to learn about how to automate fine-grained access control for all work-product in a SharePoint environment.
  5. Extensibility was also discussed.   At SPC14 the conversations were about information rights management extensibility – starting off with one Microsoft solution such as SharePoint, then extending the same information rights management solution to Office 365 and other products.

more “SharePoint 2014 Key Security Takeaways – Our Top 5”

Do you have SharePoint Site Explosion?

By Mandy Pang

Microsoft SharePoint server is an outstanding and widely adopted collaboration platform for sharing business-critical data. However, enterprises are finding that SharePoint’s permissions-based security model is not scalable and doesn’t provide adequate controls for sensitive, regulated, and highly valuable data. There is a rapid proliferation of SharePoint sites and data, as well as SharePoint’s ad-hoc collaboration and discretionary access control model.  Due to the rapid proliferation, organizations face an increased risk that their sensitive data will be leaked or mishandled. Because of this, users are more likely to grant access to critical assets in SharePoint in ways that may result in non-compliance and intellectual property (IP) leakage. more “Do you have SharePoint Site Explosion?”

Common Headaches About Permissions

By Mandy Pang.

In my last post, I talked about the high level challenges with permissions, and how new capabilities such as Active Directory Rights Management Server (AD RMS) and Windows Server 2012 Dynamic Access Control (DAC) offer some promising options for access control, but remain siloed within Windows File Server environments.
In this post, I would like to elaborate on the challenges of permissions. more “Common Headaches About Permissions”

Problems with Permissions

By Mandy Pang.

Collaborative technologies such as e-mail, instant messaging, Microsoft SharePoint, extranet portals, and software-as-a-service (SaaS) applications make it easier to share information and communicate innovations. In a typical Microsoft environment, Office documents may be created on the desktop, then loaded to a File Server for internal sharing. Or they may be uploaded to SharePoint for sharing with your supply chain, or be emailed to a fellow employee overseas. Note the ease with which IP can be transformed, duplicated and shared. more “Problems with Permissions”

SharePoint 2013: Exciting new capabilities to share (leak?) sensitive data

By Andy Han

SharePoint 2013, made generally available (GA) earlier this year, introduces several new features that will impact how information is shared across the enterprise: new social capabilities, improved search, cross-site publishing, and a roadmap for companies that want to move to Office 365 in the Azure cloud. The net impact seems to be that sharing information inside and outside an organization will be even easier. This will likely create new challenges for organizations that want to control how teams are accessing and distributing data in SharePoint. more “SharePoint 2013: Exciting new capabilities to share (leak?) sensitive data”

DAC in 2 Minutes

By Sandeep Chopra.

In my last two posts on Dynamic Access Control (DAC), I described some of the limitations of traditional approaches to Authorization Management (see here) and how dynamic authorization is different (see here). It’s all about choosing the right tool for the job. more “DAC in 2 Minutes”