Many people say we're at the "cyber-crime tipping point". Others like to point out that the cloud is enabling growth through collaboration - lowering barriers to entry and enabling disruption through partnering and supply chain management. These things can't both be true, can they?
They are. Large and especially regulated companies depend more and more on an eco-system of consultants, contractors, freelancers and services. To say nothing of auditors, regulators and even customers. Yet, as firms move to the cloud, excited by the prospect of being able to collaborate with anyone, anywhere - users find they've gone backwards:
There are good reasons for these security measures. Organizations that let copies of their data outside their perimeter are putting themselves at risk. Locking down these systems may prevent users from sharing, but they also limit the risk of a breach.
The secure external collaboration problem is a result of messaging, file sharing and collaboration systems having "all or nothing" access models. You can either give data away for all time, or you cannot share it at all. So long as the transmission of the document is secure ("at rest and in motion") everything is presumed to be fine.
Until you realize you sent it to the wrong person. When you collaborate and share with your fellow employees, there's virtually no risk of that. Each employee is carefully vetted prior to employment. If they cause a breach they can be fired. For starters.
If you're thinking there has to be a better way ... you're right! Companies that make it their mission to work seamlessly with partners and customers of all kinds, inclusively, achieve higher growth. In fact, secure external collaboration is one of the keys to all kinds of business success.
The key to enabling secure external collaboration is to identify the main use cases for your company by answering a few questions:
Once you have answers, it's easy to design a policy that mitigates risk for each case, using the e-Share platform's fine grained sharing options. For example, restricting recipients to a view-only experience, requiring them to login with a corporate account, or, if you absolutely have to give them a copy, ensure it is fully traceable. And do it all with proper governance, centralized visibility and control - to ensure enterprise-wide compliance.
The following table shows actual use cases, appropriate sharing options, and some comments explaining how it all comes together for the recipient.
File Sharing Examples
Deploying e-Share to Enable Secure External Collaboration
Your first step is to identify a sub-domain of your corporate domain to use when sharing... for example: share.YOURCOMPANY.com or cloud.YOURCOMPANY.com. Generate a certificate for this domain and send it to our service desk.
Next, tag users who will be using the e-Share service in your active directory. We recommend enabling single sign on (SSO) for the enterprise. This can be done anytime using our self-service administrative web portal.
From there, you can quickly and easily configure your policies, and optionally deploy our client apps for Windows, OS/X, iOS and Android. Or the External Collaboration Bot for Microsoft Teams and Slack.
Now your users can share anytime, with anyone, in full compliance - and more importantly, without losing control. The policies you implement take care of the rest. Even after you share!