Stopping File Theft

[pcet]

Hi,

 

I need to find a way to stop a user taking a particular file offsite. (.xls)

 

Or if they manage to get the file off site, make it useless.

 

I need to ensure staff can't simply 'save as' and create a copy of the file

 

 

 

There is a software called 'Secudrive File Server' which seems to be perfect but it's seriously expensive.

 

Is anyone aware of software that creates a secure zone of sorts with certain software installed?.....or can anyone thing of a way to keep a file absolutely protected?

 

 

I know it's a bit of a Pandora's box, my apologies.

[Rob_D]

Where would your staff be saving it to?

It might be easier to prohibit the saving of data to usb storage. This is something we're considering doing with sophos.

[pcet]

but even if I disabled the use of USB drives, in theory a staff member could email the file out or upload it to drop box etc.

 

I know it's probably impossible to have a 100% water tight solution but blocking USB drives would still leave a great deal of holes.

[rad]

Is this one staff member or all?

 

By stopping them taking fils, could stop them working at home. All departments will use all office files for projects, grade analysis etc

[pcet]

its basically a spreadsheet with macros and variables they use for planning jobs and getting final costs, we are lead to believe it would be a massive issue if a competitor got a hold of it.

 

Other than management, staff should just be able to use it and that't it, can save it, copy it, attach it, upload it, or take it home at all in any way.

[3s-gtech]

The best way of doing that is to translate it into a web based version that only gives access to the fields and results rather than the underlying file and any lookups within it. You're going to be spending so much time and effort otherwise that this approach may well end up cheaper (and is better from a compatibility point of view). Depends if you have the skills in-house.

 

Otherwise you may have to virtualise it or only make it accessible within an isolated VM which doesn't allow clipboard access.

[FN-GM]

Microsoft Active Directory Rights Management Services will be able to do this. You will need to setup a server for it etc. The only thing it can't prevent is someone taking a photo of the screen. For example It will stop the computer from taking screenshots etc when a controlled file is opened. It can also stop the contents from being emailed, copied and paste etc. it can also do much more.

[QwertyMash]

If it just does some macros and calculations etc. I would suggest design and building an internal web app for it.