CAMS-Rights Management

Question 1

Defining Rights Management

Answer 1

The basic practice of rights management involves protecting sensitive data by assigning specific permissions to users within system.

Question 2

The Importance of a Rights Management Policy

Answer 2

The ease with which information can be intercepted necessitates a rights management policy for every business and organization dealing with confidential data.

By defining permissions and managing access, businesses are able to

• Protect customer information
• Maintain security for BYOD policies
• Improve the security of 3rd parth and remote employee access
• Remain in compliance with current security regulations

Question 3

Consequences of Improper Rights Management

Answer 3

Data breaches are the most damaging consequences for businesses failing to create effective rights management policies.

Accidental breaches caused by users within the system can have impacts of similar severity.

Data removed to 3rd party devices is subject to intentional theft or infection with malware. If reintroduced into the system, the malware may spread and result in additional data loss and destruction.

Question 4

Rights Management Best Practices

Answer 4

Incorporating IRM strenghtens basic rights management.

IRM involves encrypting data wherever it goes, information is guarded against breaches resulting from accidental transfer.

Education is a key part of applying rights management policies within an organizations.

Put proper permissions in place reduces the risk of data breaches and keeps confidential information from leaving a system or being duplicated and leaked.

Question 5

Digital Rights Management (DRM)

Answer 5

A larger application of rights management, often associated with the protections put on digital media like movies, music and electronic books.

Question 6

Information Rights Management (IRM)

Answer 6

A subset of DRM used by businesses and enterprises to protect data. This approach to permissions is used to prevent the unauthorized sharing or theft of sensitive information and documents.

IRM can be used to govern both access to and distribution of data by making use of encryption algorithms and decryption keys.

IRM allow businesses and organizations to permit or prevent

• Copying
• Editing
• Forwarding
• Printing
• Saving
• Screen captures
• Transfer to external devices