Archive for the ‘SharePoint’ Category

What I Don’t Love About SharePoint

Tuesday, February 14th, 2012

Accellion

A recent article in Fierce Content Management entitled “Survey finds many users blow by SharePoint security” reveals how cavalier some Microsoft SharePoint users are about maintaining security within the widely used Enterprise collaboration and content management solution.  According to the SharePoint security survey conducted by Cryptzone, an IT threat mitigation company, 92% of respondents said they knew that taking content out of SharePoint created a security risk; still 30% were willing to take that risk for the sake of convenience.  Even more eye-opening was that 43% took sensitive content out of SharePoint to work at home and 55% said they did that to give material to someone without access to SharePoint.

There’s a clear need to be able to share files externally from SharePoint that is not currently being addressed in many organizations.

To effectively collaborate today, users need to easily share content securely within their organization and with external partners across the firewall. But in order to securely share data with outside parties, organizations need to create a secure file sharing system within their SharePoint environment.  Unfortunately, it is not easy or inexpensive to build an external-facing SharePoint server farm.

In order to open up content in SharePoint to external users, IT needs to provision a license and also set up external facing SharePoint servers on the DMZ.  This is an expensive proposition. So organizations usually bypass setting up external SharePoint servers.  This often leads employees to create work-arounds rather than taking the time to put in IT requests.  However, this is a data breach waiting to happen.  Once a document leaves SharePoint “illegally” the ability to track and manage the file is compromised.  This is particularly important in industries subject to HIPAA and other regulatory compliance.

There is a solution to this problem for organizations who want to make the most of their SharePoint investment.  Accellion offers a plug-in for SharePoint that enables users to quickly, easily, and securely share any size file from within the SharePoint Document Library to both internal and external recipients.  The plug-in not only makes it easy to share files across the corporate firewall but also provides easy-to-use file tracking and reporting required to meet industry and government regulations such as HIPAA, SOX and GLBA.

So if your organization has made an investment in SharePoint but you haven’t yet implemented external sharing of SharePoint documents for your users please give us a call.   As the Cryptzone survey illustrated if a solution isn’t provided for external file sharing from SharePoint then users will come up with their own solution and security isn’t typically top of their list of requirements.


From Network World: Microsoft security expert warns over SharePoint data at risk

Friday, May 6th, 2011

Robert Mullins’ Network World blog entry warning that SharePoint data might be at risk comes as no surprise.  Customers have come to us for a way to extend the file sharing functionality of SharePoint securely beyond the firewall for the last few years.

What was most interesting is the research done by Randy Franklin Smith of Ultimate Windows Security.  The company’s survey showed that:

SharePoint users come from highly regulated industries: 38.2 percent comply with PCI; almost 20 percent with HIPAA; and 27.6 percent with SOX.  However, 72 percent of respondents have not evaluated the compliance issues related to their SharePoint data.

72 percent.  With the high profile data breaches happening every week, it’s important that these companies work on an overall data security strategy that includes SharePoint.

With Accellion’s plug in for SharePoint, it simply becomes another choice in the pulldown menu within SharePoint that lets users choose to share certain files with added security inside and outside the organization.  That means: an easy-to-use reporting and audit trail, three tiers of defined user access, file encryption while being transferred and at rest, and the ability to set an expiration date for the file and to set permissions upon sending the file.

Accellion Secure Collaboration is a finalist for the Best of TechEd awards at Microsoft TechEd North America this year in Atlanta, May 16-19.  Feel free to come by our booth 1830 for more information and to say hello.