Dokumendi klassifikatsioon
Dokumentide klassifikatsioon ja turvalisus on tähtis teema ettevõtetele ja valitsusasutustele.
Ärieesmärkide täitmisel koostööd tegevad inimesed ja asutused vahetavad infot. Kui mängus on tundlik info, eeldatakse, et osapooled on eelnevalt kokku leppinud, mis info täpselt on tundlik ning kuidas sellist infot ära tunda ja käsitseda. Andmete vastuvõtja eeldab, et saatja järgib kokkulepitud protseduure andmete tundlikkuse tuvastamiseks.
LibreOffice pakub tundlikkusteabe väljendamiseks standardiseeritud vahendeid, mida eri osapooled saavad kasutada, kui on tarvis kasutusele võtta infovahetusvõimelised süsteemid. LibreOffice pakub standardsete andmeväljade kogumit, mida saab kasutada tundlikkusteabe hoidmiseks, üritamata samas määratleda, mis nende väljade sisu peaks olema. Selline lähenemine on edusamm võrreldes praeguse ainsa alternatiiviga, kus info edastaja peab tundlikkuse väljendamiseks kasutama suvalisi vahendeid, mis ei pruugi info saaja jaoks kasulikud olla.
Ehkki see standard on välja töötatud eesmärgiga, et seda saaks rakendada igas tegevusvaldkonnas, on LibreOffice võtnud nomenklatuuri ja kategooriad lennundus- ja kaitsetööstusest, kus tundlikkuse märkimine tuleneb riikliku julgeoleku, ekspordikontrolli ja intellektuaalomandi põhimõtetest.
LibreOffice’is on kasutusel TSCP (Transglobal Secure Collaboration Participation, Inc.) loodud ja konkreetsest tarnijast sõltumatud avatud standardid. Eriti huvipakkuvad on neist kaks.
-
Business Authentication Framework (BAF) specifies how to describe the existing policy (which is probably some legal text) in a machine-readable format.
-
Business Authorization Identification and Labeling Scheme (BAILS) specifies how to refer to such a BAF policy in a document. The concepts in BAILS are so generic that they can be applied to any format that supports document-level user-defined properties.
BAF-kategooriad
The default BAF categories for LibreOffice are listed below.
Only the Intellectual Properties category will modify the layout of the document with a watermark, fields in the header and footer and an information bar on top of the document area. Each item inserted in the document is controlled by the classification configuration file.
Intellektuaalomand
Intellectual property is a generic term for the nature of the contents of the document. Select this category for general purpose document classification.
Riiklik julgeolek
Selects the category of this document for the national security policy type. The selected category is saved together with the document as BAILS metadata in the file properties and no modifications is carried in the document layout or the user interface.
Ekspordikontroll
Selects the category of this document for the export control policy type. The selected category is saved together with the document as BAILS metadata in the file properties and no modifications is carried in the document layout or the user interface.
Refer to your corporate data security policy and information security officers for support in document classification.
Default levels of classification
LibreOffice provides default levels of document classification (BAILS) shown below, sorted by increasing level of business sensitivity:
-
Non-Business: Information in document has no impact in business, if made public.
-
General Business: Minor impact. Information has impact in business, can generate embarrassments, minor damage in brand image, if made public.
-
Confidential: Modest impact. Information disclosed can damage business brand, can generate negative media coverage and loss of revenue.
-
Internal use only: Major damage. Negative national media, lawsuits, fines, long term brand damages.
Customizing classification levels.
LibreOffice allows customization of the levels of classification for your business. To customize the number and the name of the levels, copy the file example.xml located in into a local folder and edit the contents.
Use the file with your LibreOffice locale in the name as example.
Save the file and make the adequate changes to the classification path above to access the file.
Your system administrator can place the file in a network folder and make all users access the classification settings file.
Pasting contents in documents with different levels of classification.
To prevent a breach in the security policy, contents with high classification level pasted to documents with lower classification level are not allowed. LibreOffice will display a warning message wherever it detects that the contents of the clipboard have higher security classification than the target document.
Klassifikatsiooni tööriistariba
Klassifikatsiooniriba sisaldab vahendeid dokumendihalduse turvamiseks.
The Classification toolbar contains listboxes to help in selecting the security of the document, according to the BAF category policy and BAILS levels. LibreOffice will add custom fields in the document properties (, Custom Properties tab) to store the classification policy as document metadata.