Part 5 of our Top Challenges of GDPR series provides tips for implementing a key requirement of GDPR: privacy by design and default.

This is the twelfth installment in our How-To series: an ongoing set of product posts full of tips and tricks for getting the most out of Digital Guardian Secure Collaboration. Public. Restricted. Top Secret. You know the drill. If you’re like most organizations, you have a similar schema to classify confidential data. But how do you add additional protections to your most sensitive content? And how do you make sure competitors can’t access your strategic plans if they do get their hands on them? We recently announced dynamic, two-factor authentication for highly sensitive data. With native two-factor authentication and out-of-the box integrations into RSA SecureID and Duo Security, we’re giving our customers the ability to add an on-demand, two-factor challenge for users accessing highly confidential secure content. The best part: it’s really simple. And it’s an incredibly powerful way to let your team know they’re working with confidential content and protect against compromised credentials. Here’s a quick breakdown of how to enable two-factor authentication on confidential documents with Digital Guardian Secure Collaboration: Build a “Top Secret” Security Policy with Two-Factor Authentication In the Admin portal, create a security policy to classify documents as Top Secret. This security policy will not only label your data as Top Secret, it will allow your team to secure and control how recipients work with classified content, wherever it travels. For highly confidential documents, we recommend a security policy that disables editing, saving and printing on your data. Quickly add two-factor authentication by selecting Require Authentication > Secondary when building the policy. You can choose either native Digital Guardian Secure Collaboration two-factor authentication via Twilio or plug-and-play integrations with RSA SecureID and Duo Security. It’s an effective way to help you consistently manage authentication across your business. Secure Data with your “Top Secret” Policy When you secure a document with our product, you’re ensuring your Top Secret security policy sticks to your data throughout its life cycle - even if it’s downloaded, duplicated or moved offline. To manually secure a document, right-click the file and select “Top Secret.” Alternatively, automatically secure and apply the Top Secret policy to any email leaving your organization, automatically secure files with sensitive keywords stored in local SMB drives, Box, Dropbox, or OneDrive/SharePoint. Challenge Recipients with a Two-Factor Authentication Token What happens when recipients get a Digital Guardian Secure Collaboration secured document? Recipients can easily access secured content without installing our software, proprietary software or clunky plug-ins. Our product will first validate their email address and then challenge them with a two-factor authentication challenge. See screenshot below for our native two-factor authentication via Twilio. And that’s it! You’ve now added additional checks and balances to prevent leaks and ensure your most confidential content is in the right hands - no matter where it travels after it leaves your network and moves to untrusted environments. We’re here to talk to you anytime and show you our Secure Collaboration functionality if you have any questions.

The fourth installment of our Top 5 GDPR Challenges series offers tips for complying with the GDPR’s strict data breach notification requirements.

A robust healthcare data protection program goes beyond compliance - here are some tips for protecting healthcare data against today's threats.

Learn about the EU's Data Protection Directive in Data Protection 101, our series on the fundamentals of information security.

GDPR enforcement started last year, bringing with it some key changes for enterprise data protection efforts around the world.

Tackling these five challenges early will help ensure that your GDPR compliance efforts are successful.

Learn about the EU’s Directive on the security of network and information systems in Data Protection 101, our series on the fundamentals of information security.

Learn about the NIST SP 800-53, a critical component of FISMA compliance, in our Data Protection 101 series.

Learn about the role of data protection in achieving FISMA compliance in Data Protection 101, our series on the fundamentals of information security.

With its enforcement date approaching, here are some key points to consider in preparing your organisation for GDPR compliance.

Learn about the DPO's role in managing organizational data protection and overseeing GDPR compliance in Data Protection 101, our series on the fundamentals of information security.

Understanding your goals is a critical first step in your journey toward building the right data protection program for your organization. This blog examines some of the key considerations for this process.

Whether digital or physical, a watermark is an excellent tool for discouraging counterfeiting and establishing the ownership and veracity of a document.

Self-destructing messages are certainly attention grabbing, but there are many legitimate reasons to limit someone's ability to view or edit a file, by time, by usage, or even by role. We have customers today using this capability to manage job offers and term sheets that expire after a specific date. Some are even managing the lifecycle of business records and classified data types that must be destroyed after a certain number of days, weeks, or months.