Commercial Integrator June 2022 - Special Section 11

Securing Our Future
The foundational security layer for any network is multi-factor authentication (MFA).
by receiving and then entering
a multi-character code).
The other device might be
an RSA token, a phone or
tablet, a laptop or desktop.
Some Intranet portal
authentication is limited
to CAPTCHA verification,
which confirms only that a
human is involved, not necessarily
an authorized user.
2. Identity management
with conditional
access: Conditional access
policies, integrated with
an active user directory,
allow enterprise technology
managers to block or grant
access to certain resources
and apps on a policy basis,
contingent on whether
a user or device meets
certain conditions, including
successful MFA, login
from a location and device
within their known parameters,
and using a compliant
application.
Access can be managed
in the background without
impeding productivity. For
example, anomalies such as
logins within a short period
of time from very far-removed
physical locations,
or multiple login attempts
with different passwords
over a short period of time,
will trigger alerts to IT and a
rejected login. At the same
time, the platform can recognize
and allow access to a
team member who might log
into the cloud remotely at
one point and then work on
premise, without separation.
Conditional access also
serves as the network's
antivirus and anti-malware
layer. Since authentication
requires alignment of
self-reported user identity,
Commercial Integrator JUNE 2022
location, device and other
pre-specified variables, in
order to receive the access
requested, this layer also
protects against password
hacks.
3. Shared file mandates:
Integrated documentprocessing
suites all have
shared drive capability,
but users are not always
limited to saving files to
that shared drive, nor to
creating work within the
company's licensed applications.
The result is that
many files on local or even
removable drives are not
protected by the corporate
" circle of trust. " On authenticated
devices, making it
impossible to save files on
locations other than the
shared drive also benefits
the employee, who then can
securely access and locate
any file needed (presuming
an intuitive taxonomy for
shared resources has been
established, as is strongly
recommended). A shared
drive mandate also reduces
emailed documents, which
is desirable for both security
reasons and version control.
4. Data governance:
Ensuring that all organization
files are in a shared
directory enables file and
resource-level gated access,
set by users if/as appropriate,
such as need-to-know
access, or restricting print
or external forwarding. In
addition to adjusting sensitivity
settings by document,
type, or folder, users can
encrypt any email manually.
Administrators can also
set default parameters to
ensure that even if the user
forgets manual encryption,
trigger content such
as passwords, credit card
numbers, or Social Security
numbers will result in
encrypted transmission.
5. Mobile device management
(MDM) and mobile
application management
(MAM): These functions
control how corporate-owned
or user-owned
compliant devices are used,
including mobile phones,
tablets and laptops. IT can
configure policies to control
devices and applications,
including deletion of proprietary
files when employees
leave or contracts end,
especially under adverse
circumstances. This safeguard
avoids the " What is
proprietary? " question with
which NDA signatories may
struggle, or forgetfulness
as to what files they have
commercialintegrator.com
KRAS99/STOCK.ADOBE.COM
http://www.commercialintegrator.com
Commercial Integrator June 2022

Table of Contents for the Digital Edition of Commercial Integrator June 2022
