Data protection in Microsoft 365 with NC Protect
Control who can read, use and share sensitive information in SharePoint Online. Separate key management can be added where the integration supports it.
Access that reflects the information's context
NC Protect from archTIS uses attribute-based access control, ABAC. Rules can take account of information and user attributes and adapt protection to the context.
The solution can complement classification and sensitivity labels in the Microsoft environment. The aim is to connect the organisation's rules to the actual content and how it is used.
More ways to protect information while it is being read
NC Protect offers features including dynamic watermarks and a Secure Reader for restricted, read-only viewing. Rules can also restrict access or control encryption. Which functions are suitable depends on the content, clients and working practices.
A user-specific watermark can make responsibility and origin clear. It does not make all copying or photography impossible. Test the protection in the workflows used by employees and external parties.
NC Encrypt and Complior's key service
NC Encrypt complements NC Protect with the option of separate key management. Complior's service description specifies a connector to Complior KMS, with functions for key lifecycle management, roles and HSM integration.
Integration, licences and responsibilities need to be verified for the chosen Microsoft environment. Key control is one part of data protection and does not replace appropriate permissions, information classification or secure handling by users.
Start with a clearly defined information flow
- Which information needs additional protection?
- Which user and file attributes should determine the rules?
- How should internal and external sharing work?
- How should keys, access and recovery be managed?
- How do we test and review the rules before a wider rollout?
Sources and further reading
Sources reviewed .