Information security is an important factor for the success of a company. However, while the protection of personal data is regulated in detail by law, companies and organizations can introduce different concepts to maintain information security.
The German Federal Office for Information Security (BSI) has published the IT-Grundschutz-Kompendium (in German), a guide for companies and organizations on how to secure information and IT systems. Based on the requirements of ISO 27001 - the international standard for setting up an information security management system - this compendium lists three basic values, or protection goals, namely confidentiality, integrity and availability, which can be expanded depending on a company's risk assessment.
This white paper describes measures DocuWare as an Enterprise Management System offers for implementing these basic security objectives with regard to the documents archived in DocuWare:
Confidentiality: documents and data are only accessible to authorized users
Integrity: documents and data cannot be changed without authorization, changes can be traced
Availability: DocuWare services and documents are always available
Access security to the DocuWare system
Backup of data stored in DocuWare
This white paper does not deal with setting up a DocuWare system, embedding DocuWare in the company's IT infrastructure, backing up databases and file systems outside DocuWare, protecting local computers or DocuWare as a service provider (DocuWare Cloud).
The aim of the white paper is to enable you to form a technologically well-founded opinion about the document security of DocuWare on-premises system and in DocuWare Cloud. Where differences exist between the two systems, these will be referred to in detail.
The paper is aimed at readers with an interest in technology, particularly technical staff at clients, sales partners, and consulting firms, as well as specialist media. It assumes a certain level of technical knowledge about the structure of modern software applications, ideally of document management systems.
About DocuWare
DocuWare is a solution for document management and workflow automation. DocuWare lets you access documents and important information they contain at any time and anyplace.
The documents are stored and indexed centrally in file cabinets. Workflow automation makes it possible to integrate documents into business processes. The DocuWare website provides information on the various fields of application.
DocuWare's security concept follows the principles of the General Data Protection Regulation (GPDR), which require the protection of personal data through technical design and data protection settings.