Download as PDF - Secunet

Technologies & Solutions
Electronic management of classified
information without discontinuity of media
SINA Workflow for security and compliance with regulations
Anyone who has experience of working with classified
electronic data and processes is familiar with
the dilemma of complying with VSA (the national
regulations governing classified information) while
still coping with the job in hand. This conflict has
increased steadily over recent years, because
the existing regulations were originally conceived
for an age in which everything was committed to
paper. But rapidly increasing information flows
have long since made electronic processing indispensable,
and there are currently no software
systems which have been approved and are sufficiently
productive to be used for VSA-compliant
processing.
SINA Workflow represents a comprehensive, VSA-compliant
solution to the aforementioned dilemma:
- The compilation, processing and distribution of classified
data takes place without any discontinuity of media
- Unlike other solutions, SINA workflow does not merely
address individual aspects of VSA
- There is a logical, cryptographically secured enforcement
of the ‘Need to Know’ principle
- Uncontrolled outflow of classified data is prevented
- Every activity that VSA requires to be verified is securely
logged to legal audit standard
SINA Workflow comprises central registry, control and storage
systems as well as remote clients based on the SINA
Workstation.
The complete lifecycle of classified documents and operations
is mapped, so that a user is supported and guided
through the system right from the start. The creation of a draft
classified document takes place within a SINA Workflowspecific
session on a SINA Workstation. When the draft of the
classified item is registered, it is encrypted and saved to a
Using
SINA Workstation
for classified
information
central location. From that point onwards, other contributors
can be allowed access to the draft classified document. In this
way, SINA Workflow guarantees VSA-compliant processing of
classified documents within a group and also offers support
for addenda and co-signing processes. After the completion
and registration of the finalised item, the classified document
itself can then be distributed. Classified documents can, of
course, also be printed or exported.
In addition to supporting users, SINA Workflow also assists
system administrators, e.g. by automatically keeping a log, or
by generating an inventory of classified documents.
Work is in progress with a German federal government office
on the prototypical installation and integration of SINA Workflow
into the existing network infrastructure.
More information:
Peter Janitz
peter.janitz@secunet.com
SINA Workflow is able to map the entire lifecycle
of classified documents and processes.
This now facilitates electronic, VSA-compliant
processing of classified information.
Subscribe to secuview
Would you like to receive secuview on a regular basis, free of charge
Please choose between the print and electronic versions and subscribe at https://www.secunet.com/en/the-company/it-security-report-secuview.
There you can also change your preference or unsubscribe.
Illustrations: Cover People: plainpicture/OJO; S. 3 (Ordner), 6, 7, 12: shutterstock.com; Airport Düsseldorf S. 8 - 9: Andreas Wiese; S. 10: iStockphoto.com;
S. 19: EUROFORUM Deutschland SE. Others: secunet.
16 » 1 | 2013