A Seclore White Paper

EDRM

ERp

Efss dlp

ecm

sap

CASB

Automating Enterprise Digital Rights Management (EDRM):

How to Rapidly Close the Security Gaps in External Collaboration

# Fi

les P

rote

cted

# Days EDRM is Implemented

Enterprise Digital RightsManagement – The Answer to SecureCollaborationEnterprise Digital Rights Management (EDRM) offers organizations a way to persistently protect files wherever andhowever they are shared. At a time when more and moresensitive information is shared with third parties, the ability toapply persistent, granular usage rights to that information iscritical to avoiding data leakage.

EDRM goes beyond data loss prevention, file encryptionand other traditional security technologies; it allows youto maintain constant control over a file while it is at rest, intransit and at work. That means you can control who canaccess the file, from which device or IP address, and for howlong. Even more importantly, EDRM allows you to controlexactly what the recipient can do with the file: view, edit,copy/paste, print, run macros, and screen capture. With someadvanced EDRM systems, these ‘usage controls’ work withinthe native application such as Adobe, MS Word, MS Excel,Image Formats, Auto-CAD, and many more, ensuring linkswithin the document remain viable and the user experience isseamless.

Ad-Hoc Versus Automated EDRMMost EDRM systems are designed to only support thedocument creator or ‘sender’ manually protecting the file.These solutions are only viable in situations where very fewsensitive documents are shared. The reason: If you arerelying on your employees to manually protect files as theyare created or shared, you will not close your collaborationsecurity gap reliably or quickly.

To ensure the success of EDRM projects, you need to lookfor the solution that will enable you to automatically ‘attach’usage policies at the exact point where files are downloaded,shared, or discovered. To enable this automation, the EDRMsolution must have two primary capabilities: the ability toeasily connect EDRM with existing systems and the ability toeasily leverage and augment existing access policies.

Connecting EDRM to Existing SystemsThe first step to automating persistent file-centric securityis getting close to the file storage, sharing, and discoverysources. To easily integrate EDRM with your existing systems,you want a solution that provides a robust library of prebuiltconnectors for Cloud Access Security Brokers (CASB),Enterprise File Sync and Share (EFSS), Enterprise ResourcePlanning (ERP), Data Loss Prevention (DLP), and EnterpriseContent Management (ECM) solutions. These connectorswill enable you to automatically attach the usage policies asdocuments are shared via EFSS, discovered by DLP and CASB,and downloaded from ERP and ECM systems.

By connecting directly with existing systems, you willdramatically accelerate the protection of sensitive information.Imagine turning on your EDRM system and on day one,protecting hundreds of documents without employeeintervention. That is the power of seamlessly connectingEDRM with your existing systems.

Figure 1: Automatically attaching usage policies to the files, you will protection 60% more of your sensitive files annually.

EFSS

DLPCASB

ERP

ECM

EDRM

amy.jones@gmail.com - View Only

MS SharePoint Policies

kevin.smith@gmail.com - Edit

susan.morga@gmail.com - Contribute

amit.gupta@gmail.com - Full Control

View

Seclore Policies

View + Edit

View + Edit + Print

View + Lite View + Edit + Print +Secure Copy + Offline + Screen Capture

Policy Federation: The Other Half ofAutomated EDRMThe other half to ‘automated EDRM’ is streamlining theprocess of defining and managing the granular usage policies.That’s where Policy Federation comes into play. PolicyFederation leverages the access policies already definedand managed in other Enterprise systems (DLP, ECM, ERP,CASB, and EFSS) and maps these existing access policies tothe robust, granular usage policies that are controlled by theEDRM solution.

By leveraging the existing access policies, and seamlesslysynching the access + usage policies (e.g. change made in ECMsystem automatically mapped to EDRM usage policy) acrosssystems, you can minimize the effort needed to manage youroverall policies and significantly increase the consistency ofyour file-centric usage rights.

Seclore’s EDRMSeclore’s advanced Enterprise Digital Rights Managementsolution enables organizations to control the usage of anytype of file, wherever the file goes, both within and outsideof organizations’ boundaries. Featuring dozens of prebuiltconnectors for leading enterprise applications (EFSS,CASB, DLP, ECM, ERP, and eMail), and an innovative PolicyFederation capability, Seclore automates the protection ofdocuments as they are downloaded, discovered, and sharedto ensure rapid adoption.

The goal: to ensure secure collaboration and empowerorganizations to embrace BYOD, Cloud services, EnterpriseFile Synch and Share (EFSS) and all forms of externalcollaboration with confidence.

Summary The combination of pre-built connectors + Policy Federationwill enable you to automatically protect 60% more of thesensitive documents that are flowing around and sharedoutside your organization. Automation will enable you torapidly close your collaboration security gaps and will ensuresthe overall success of your EDRM deployment. If you’d like tolearn more about how Seclore’s EDRM solution works, visitwww.seclore.com or call us at 1-844-4SECLORE.

Figure 2: To automate file-centric security, you need to seamlessly connect EDRM with existing systems.

Figure 3: Policy Federation makes it easy to augment existing access policies with usage controls.

EDRM

ERp

Efss dlp

ecm

sap

CASB

Contact UsReady to start securing your information wherever it goes? Call us at: +1-844-4SECLOREEmail us at: sales@seclore.com

About Seclore Seclore’s Enterprise Digital Rights Management solution enables organizations to control the usage of files wherever they go, both within and outside of organizations’ boundaries. The ability to remotely enforce and audit who can do what with a file (view, edit, copy, screen capture, print, run macros), from which device, and when empowers organizations to embrace BYOD, Cloud services, Enterprise File Synch and Share (EFSS) and external collaboration with confidence.

Featuring dozens of pre-built connectors for leading enterprise applications (EFSS, DLP, ECM, ERP, and eMail), Seclore automates the protection of documents as they are downloaded, discovered, and shared to ensure rapid adoption. Seclore was recently recognized by Frost & Sullivan with a Growth Excellence award, by Deloitte as one of the ‘50 Fastest Growing Technology Companies,’ and by Gartner as a ‘Cool Vendor,’ due to innovations in browser-based access to protected documents. With over 4 million users across 400 companies in 29 countries, Seclore is helping organizations achieve their data security, governance, and compliance objectives.

Visit us at www.seclore.com for more information.

West Coast157 S. Murphy AvenueSunnyvaleCA 940861-844-473-2567

East CoastGraybar Building420 Lexington Avenue Suite 300New York City, NY 10170

MumbaiExcom House Ground Floor Plot No. 7 & 8, Off. Saki Vihar Road Sakinaka Mumbai – 400 072 +91 22 6130 4200 | +91 22 6143 4800

USA

INDIA

Seclore Asia Pte. Ltd.8, Eu Tong Sen Street, # 12 – 99The Central, Singapore – 059818Office: +65 6224 1009Tel.: +65 8292 1930

SINGAPORE

SAUDI ARABIA

Building Q1-01, Office No: 145PO Box : 124257 SAIF ZoneSharjah UAE.+97155-990-1570+9716-538-9393

UAEKing Abdullah RoadNCB Building, 1st FloorPO Box 17544, Riyadh 11494 +966-11-2055092 Ext. 111 +966-50-4339765

USA