Cloud Storage Permissions and Security

One of the transformational features of cloud file sharing services like Google Drive is that it’s easy to work with collaborators outside your organization by sharing files more broadly than you would be able to with an on-premises file server. But leveraging that flexibility without precise security considerations creates opportunities to unintentionally give access to the wrong people.

We design file storage systems starting with the principle of least privilege to make sure that default sharing permissions are always strict and secure. We work with our clients to define at least two additional tiers of permissions that allow for explicit sharing with specific audiences. That way collaborators from outside the organization can be invited, and deliverables can be shared deliberately.

Scope:

• Set sharing defaults that eliminate accidental exposure.
• Define explicit permissions policies.
• Configure access policies for full staff and freelancers.
• Audit existing shares to determine where problems may arise when permissions are restricted.
• Schedule periodic reassessments and security reviews.