Addressing HIPPA and GLB Act requirements for tighter security.
HIPAA has resulted in additional security requirements involving who has access to the paper and electronic documents within organizations. In the past, many FileNet customers have relied on using 'document class level' security to limit access to the different groups of documents. While this historically was sufficient, recent tighter restrictions may have resulted in major legal exposure for many organizations. The problem is most evident with the FileNet customers that only use a few document classes and utilize one or more index fields to associate and group documents together; e.g., vendor, partner, loan section, document type, etc. While this scheme works fine for being able to easily search and retrieve "related documents", it may not address the security requirement for restricting unauthorized users from having access to the documents that contain confidential information. Organizations that are looking to expand the use of their document management system to external agencies, customers and partners; need to be able to address how they can secure documents down at the index-level as opposed to just the document class-level.
Solution:
Softech & Associates has developed a solution for customers who are interested in providing security restrictions that span both document classes and index fields. The Mid-tier security is an additional layer of security that allows imposing restrictions on which users have access to documents based on both the document class as well as index field values. Unlimited number of Security rules can be setup to map combinations of document class and index value pairs. Customers can easily add additional 'external/web groups' that are restricted to using a 'limited set' of documents without having to re-index or re-classify the existing documents in the FileNet library.
