Protected Files - Google Drive

[Eudora931]

Hi ,

 

I have been asked to look into whether we can encrypt or password protect docs on google drive. Scenario is this:

 

All staff save to Google Drive . The is some CP stuff that wants to be saved there as well but anyone can access it . I know we can set up a folder and only share it with cerain people - but the question is as the information is on the cloud is there a way of also encrypting it for added security.

Hope that all makes sense !

 

thank you!

[Oaktech]

I'd be pretty unwilling to suggest storing CP to an ordinary cloud at all tbh.

 

The few times we've had CP stuff too big to be sent via secure mail we've done the following:

 

Photos and scanned documents zipped into a password protected encrypted zip file using 7 zip, documents password protected using built in office password protection and then all of it placed into another passworded, encrypted zip file. This is then placed into the origiating person's one drive and a link generated and emailed to the recipient using the secure mail system and the passwords either delivered in person (in the case of the LA who is about a mile away) or via telephone.

[Eudora931]

Thanks Oaktech - I would say the same re: cloud based sensitive info. I need to check with the CP officer if home access is required - as tbh - I would prefer it on the school server and secure.

 

Ps - just read back my original post and apologies for the spelling! Typing too quickly! :-)

[CyberNerd]

The Documents held on Google Drive are already encrypted, and they are encrypted in transit.

Drive is certified to ISO 27001 and security audits

It sounds like it already meets your requirements.

[jbunoomally]

And what happens when the secured cloud stored files are opened on an unsecured (or even worse, compromised) home computer, where it stores a working copy of the file in local temp that can be recovered? I would think about the entire workflow re sharing, viewing, editing, storing, backing up, etc. and IL2/3 data and how you are complying with the DPA and any foreseeable risk.

 

JB.

[CyberNerd]

And what happens when the secured cloud stored files are opened on an unsecured (or even worse, compromised) home computer, where it stores a working copy of the file in local temp that can be recovered? I would think about the entire workflow re sharing, viewing, editing, storing, backing up, etc. and IL2/3 data and how you are complying with the DPA and any foreseeable risk.

 

JB.

 

If you need this level of security, so that only authorised devices can connect, you would need to setup SSO and only allow connection from IP's approved, ideally through your VPN.