Collaborative Strategies LLC
Home Home About Us About Us publications Publications News & Events Consulting Services about us News and Events contact us Contact Us search Search


Security and Collaboration

By David Colman

 

Since 9/11 and with the nation on Orange Alert, security is at the top of everyone’s mind. Then there is the directive from the Homeland Security Act that Government agencies (read FBI, CIA, NSA, etc.) all share information with each other for protection of the U.S. What this means is collaboration at an unprecedented degree, and that it is security agencies that have to collaborate.

Security and collaboration do not have to be in conflict, but rather you can develop infrastructure that can support both behaviors. Traditionally, the most used tool for collaboration (1-to-1 or 1-to-many) is e-mail. One of the major analyst firms estimates that there are over 30 billion e-mails a day (and I bet 20 billion of them are spam). What is worse is that e-mail is not secure.

OOPS!

A few months ago a CEO of a software company sent me a letter asking me to review and comment on their sales forecasts for 2003. I saw from the content of the e-mail (of course I read it) that it was really for another "David" and that he had highlighted the wrong line and sent it to my address by mistake. He later called, when he realized his mistake, and asked me to ignore the message (which I did) but it was embarrassing for him and a security blunder of the first order. In addition, the attachment, an Excel spreadsheet, was also available for me to see.

So neither the e-mail nor the spreadsheet were secure, yet billions of these private communications wiz around the globe everyday. One of the things we need to balance this risk against is the reward. Our communication gets to the other person faster than snail mail, so the cycle time for many (collaborative) processes is cut. This is a big benefit, and cycle times can be cut even further with IM (Instant messaging) and chat, which fall into the real-time collaboration category (an collaborative interaction occurs within 5 seconds).

I Chat, You Chat, We all Chat

IM was originally designed as a forum (for groups) or for a quick personal chat (1-to-1) but as it evolved from the consumer sector, it is being used more and more (with ITs blessings or not) within the enterprise. What’s even worse is that IM is following the same course of adoption that e-mail did, but much more quickly. This has some dire consequences, one of which is being overwhelmed by IM’s while online. The other is that since most IM is not secure it adds another security hole. Through IM someone hostile to you could even take over your desktop, and from there move throughout your corporate network. Other collaboration technologies, any of those video conferencing tools that use a T120 stack (which is notoriously bad with firewalls) also can produce security issues.

But how fast is IM being adopted in business organizations? Matt Cain of the Meta Group estimates that by 2007 90% of knowledge workers worldwide will use some form of IM. This is compared to only 10% who use IM with IT approval today. IDC also estimates the rapid adoption of IM from 65 million users today to 260 million by 2007.

Secure e-Meetings

So with all these collaborative technologies making Swiss Cheese out of your corporate security how can you sleep at night? Well there are some answers. Many of the vendors of collaboration technologies are aware of the increased importance on security, and have taken steps to support this. Through encrypted e-mail and IM’s new collaboration vendors are architecting their products for end-to-end security. Companies like Viack, and Linqware (which builds its security on top of Citrix) have moved into a new market space that we call e-meetings. The characteristics of e-meetings and what makes them different from other collaboration technologies are:

  • Small online meetings
  • High levels of interaction between all meeting participants
  • Persistence- the ability to store documents involved in interactions in a secure workspace
  • Presence- that ability to see who is online and what their status is (busy, can talk, etc.)
  • High level of security
  • Support both real-time and asynchronous interactions
  • Support both ad-hoc and scheduled meetings

Plug That Hole!

Most e-mail vendors and other collaboration vendors will tell you they have adequate security. However, often on closer inspection it is clear that the content of the interaction is at risk at one or more points along its transportation path, and that the vendor’s current level of encryption only deals with part of the problem. Stronger encryption (up to 1024-bit) on top of SSL and utilizing the Advanced Encryption Standard (AES) ensure that files, IM’s and other content in a collaborative interaction are secure from the time they leave the author, through the server, and to the receiver (who uses a public key to decrypt the message).

The upshot of this is to have you (the user) take a look at what types of content you collaborate about. If you are in regulated industry like financial services, medical services, or an industry based on confidentiality (legal, medical, consulting) then security is critical to you, as is collaboration. An audit of critical processes that have a collaborative component, and the corresponding security to support them is a great idea. Collaboration is only going to get more intense (currently CS estimates that only about 12% of companies use real time collaboration technologies (supported by IT) on a regular basis.

No Substitute For You

None of these collaboration technologies do we believe take the place of in-person meetings, but they are good technologies to augment such meetings. The reason is that an initial meeting is best in person, as you need to establish trust with the other person (or people) before you are willing to share (and collaborate) with them. As humans we pick up 75-80% of the information about another person from visual, olfactory and other cues (animals pick up 100% of their information about each other that way) and it is easiest to get this (often unconscious) information in person. Once the relationship has been established, then it is much easier to continue on electronically, with e-mail, IM or other collaborative technologies.

So when you can’t be there in person, collaboration is the next best thing, but do it safely and securely and the benefits and rewards are great!    

In attending the KM World conference this month, and also seeing Verna Allee’s new book The Future of Knowledge: Increasing Prosperity through Value Networks I began to wonder what the future would bring to the KM market. I bet many of you are probably wondering this also. At the conference I had a chance to get briefed by 7-8 vendors and asked each what they thought the future of KM was. Interestingly, every vendor started out with the definition of KM, which no one seemed to be able to agree on.  

David Coleman is the Founder and Managing Director of Collaborative Strategies LLC and the editor of "Inside Collaboration". He is the author of two books on groupware, and many of the monthly Hot Tips on the collaborate.com Web site as well as this newsletter. When he is not consulting for vendors or users of collaboration technologies, David is often engaged in both in-person and Web-based presentations to educate all types of organizations about the benefits and successful techniques for collaboration. He is also working on a new book on e-collaboration. He welcomes your comments, questions, and requests, and can be reached by e-mail at davidc@collaborate.com, on AOL Instant Messenger at davidc121, or by telephone at 415/282-9197.

Collaborative Strategies makes every effort to bring you timely, accurate information on collaboration and knowledge management. However, we are part of a rapidly evolving market ourselves and events occur during the publication of this newsletter every month that we do not become aware of or that happen post-production. If you know of such events please contact us at davidc@collaborate.com so we can note these key events in the next edition of this newsletter.

 

Copyright © Collaborative Strategies LLC. 2003. All Rights Reserved. This site is protected by copyright law and international treaties.[Privacy Statement]