Challenges Before Adoption
■ Background
E Precision faced ongoing concerns about core technology leaking to competitors.
• Suspected leaks of design drawings through departing employees
• No control over secondary leaks of drawings shared with partner companies
• Multiple leak channels, including USB, email and cloud
• Performance degradation when applying DRM to large CAD files
Management's attention grew after a damages lawsuit over a technology leak occurred at another company in the same industry.
E Precision faced ongoing concerns about core technology leaking to competitors.
• Suspected leaks of design drawings through departing employees
• No control over secondary leaks of drawings shared with partner companies
• Multiple leak channels, including USB, email and cloud
• Performance degradation when applying DRM to large CAD files
Management's attention grew after a damages lawsuit over a technology leak occurred at another company in the same industry.
YourIT's Solution
■ YourIT's Solution
1. Information asset classification and risk assessment (3 weeks)
- Identification of core technical materials and confidentiality classification
- Information flow analysis and identification of leak risk points
- Access rights matrix design by department
2. Document security and DRM system (6 weeks)
- Adoption of a DRM solution
- Lightweight CAD-specific DRM module
- Document centralization system
3. Data loss prevention (DLP) framework (4 weeks)
- Endpoint DLP solution rollout (250 devices)
- Email attachment inspection and approval workflow
- USB/external drive usage control and encryption
4. Access control and audit framework (3 weeks)
- Stronger physical access control for the design office
- Monitoring of document viewing, printing and transfer history
1. Information asset classification and risk assessment (3 weeks)
- Identification of core technical materials and confidentiality classification
- Information flow analysis and identification of leak risk points
- Access rights matrix design by department
2. Document security and DRM system (6 weeks)
- Adoption of a DRM solution
- Lightweight CAD-specific DRM module
- Document centralization system
3. Data loss prevention (DLP) framework (4 weeks)
- Endpoint DLP solution rollout (250 devices)
- Email attachment inspection and approval workflow
- USB/external drive usage control and encryption
4. Access control and audit framework (3 weeks)
- Stronger physical access control for the design office
- Monitoring of document viewing, printing and transfer history
Results
■ Results
Quantitative results:
• 85% fewer attempts to take confidential documents outside
• 100% of unauthorized USB use blocked
• 60% reduction in drawing print volume
• 100% of document access audit logs collected
Qualitative results:
• Passed customer security audits
• Stronger security agreements with partner companies
• Systematic security awareness training for all employees
"The biggest challenge was strengthening drawing security while maintaining design productivity. YourIT worked closely with our design department to create security policies that minimize disruption to work."
- Woosung Jung, Team Lead, Information Security Team, E Precision
Quantitative results:
• 85% fewer attempts to take confidential documents outside
• 100% of unauthorized USB use blocked
• 60% reduction in drawing print volume
• 100% of document access audit logs collected
Qualitative results:
• Passed customer security audits
• Stronger security agreements with partner companies
• Systematic security awareness training for all employees
"The biggest challenge was strengthening drawing security while maintaining design productivity. YourIT worked closely with our design department to create security policies that minimize disruption to work."
- Woosung Jung, Team Lead, Information Security Team, E Precision
