Classificació dels documents
La classificació i seguretat dels documents és un afer important per a les empreses i governs.
La informació s'intercanvia entre usuaris i organitzacions que col·laboren per a aconseguir un objectiu comercial. Quan es tracti d'informació sensible, se suposa que les parts hauran acordat quina informació és sensible i com aquesta informació serà identificada i gestionada. Qualsevol destinatari d'un recurs confiarà en el proveïdor de la informació per a seguir els procediments acordats per tal d'identificar la confidencialitat de la informació.
El LibreOffice ofereix mitjans estandarditzats per a expressar la confidencialitat de la informació, els quals es poden utilitzar entre diverses parts si s'implementen sistemes interoperables entre si. El LibreOffice proporciona un conjunt de «camps» normalitzats que contenen les dades de confidencialitat. Això no pretén definir quins haurien de ser els continguts d'aquests «camps». Aquesta aproximació representa una millora respecte a l'única alternativa existent fins ara, que consisteix en que el proveïdor utilitza mitjans arbitraris per a expressar la confidencialitat, i això podria no ser pràctic per al destinatari.
While this standard has been developed with the intent that it would be applicable in any domain of activity, LibreOffice retained the aerospace and defense industry nomenclature and categories, where sensitivity marking results from national security, export control and intellectual property policies.
LibreOffice implemented the open standards produced by TSCP (Transglobal Secure Collaboration Participation, Inc.) independent of a specific vendor. Two of them are interesting:
-
Business Authentication Framework (BAF) specifies how to describe the existing policy (which is probably some legal text) in a machine-readable format.
-
Business Authorization Identification and Labeling Scheme (BAILS) specifies how to refer to such a BAF policy in a document. The concepts in BAILS are so generic that they can be applied to any format that supports document-level user-defined properties.
Categories del BAF
Les categories del BAF incloses per defecte amb el LibreOffice s'indiquen tot seguit.
Only the "Intellectual Properties" category will modify the layout of the document with a watermark, fields in the header and footer and an information bar on top of the document area. Each item inserted in the document is controlled by the classification configuration file.
Propietat intel·lectual
Intellectual property is a generic term for the nature of the contents of the document. Select this category for general purpose document classification.
National Security
Selects the category of this document for the national security policy type. The selected category is saved together with the document as BAILS metadata in the file properties and no modifications is carried in the document layout or the user interface.
Export Control
Selects the category of this document for the export control policy type. The selected category is saved together with the document as BAILS metadata in the file properties and no modifications is carried in the document layout or the user interface.
Refer to your corporate data security policy and information security officers for support in document classification.
Nivells de classificació per defecte
LibreOffice provides default levels of document classification (BAILS) shown below, sorted by increasing level of business sensitivity:
-
Non-Business: Information in document has no impact in business, if made public.
-
General Business: Minor impact. Information has impact in business, can generate embarrassments, minor damage in brand image, if made public.
-
Confidential: Modest impact. Information disclosed can damage business brand, can generate negative media coverage and loss of revenue.
-
Internal use only: Major damage. Negative national media, lawsuits, fines, long term brand damages.
Customizing classification levels.
LibreOffice allows customization of the levels of classification for your business. To customize the number and the name of the levels, copy the file example.xml located in into a local folder and edit the contents.
Use the file with your LibreOffice locale in the name as example.
Save the file and make the adequate changes to the classification path above to access the file.
Your system administrator can place the file in a network folder and make all users access the classification settings file.
Pasting contents in documents with different levels of classification.
To prevent a breach in the security policy, contents with high classification level pasted to documents with lower classification level are not allowed. LibreOffice will display a warning message wherever it detects that the contents of the clipboard have higher security classification than the target document.