Using a CloudFileSync solution with a reseller-hosted cloud to enable secure, trackable file sharing and compliance with the law.
The client is a Sydney-based recruitment agency. The business focuses on filling C level executive roles in the advertising, communications and media sectors.
The agency handles a range of sensitive data including:
The recruitment agency is based in a central city office and has a team of eight staff. A number of the agency’s staff work from home on a part time basis. None of the firm’s staff have significant technical/ IT skills. The agency is using an old Windows SBS 2011 server and has an active data usage of 110 gigabytes (GB) per month. Data usage is growing by 20 GB per month.
A senior recruitment consultant who recently left the agency has begun working for a competitor. A short time later it was discovered that existing and new clients of the agency were being contacted by the competitor. In seeking new work, the competitor was significantly undercutting campaign quotes and the recruitment agency’s candidates were being contacted directly with job offers.
It became clear that the recruitment agency needed to investigate if information was being leaked. The recruitment agency hired a Managed Service Provider (MSP) to investigate. The MSP was asked to determine: if data was being leaked; how the data was being shared outside the agency; and who was sharing the data.
The MSP discovered that agency staff had been using their own personal file sharing accounts to share files inside the company and with clients. This practice has been in place for a number of years and, because of the way the files had been shared, current and former staff still had access to company documents stored in their own personal file sharing accounts. This practice had occurred because the company had not provided a solution to staff and because senior staff didn't understand how the free cloud sharing applications worked.
This lack of knowledge meant that free file sharing products had not been seen as a potential risk. As the file sharing had not been set up by management or by IT, no controls were in place to manage or monitor access to company information. Employees had setup folder sharing through personal file sharing accounts to collaborate with those working in the office and those working from home.
The MSP also found that a lack of technical/ IT knowledge of staff meant that there was little or no awareness or oversight of the way company files were being shared and who they were being shared with. This meant that the Agency had lost control over its valuable and sensitive data.
Finally, the MSP informed senior staff at the Agency that due to the way that staff had used personal file sharing accounts to share company information, the Agency had breached Commonwealth Government legislation and regulations including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
The personal data of agency staff and Australian job seekers had been stored on the servers of a public cloud service located in the United States of America. This had happened without their written permission, which is a breach of the legislation.
The MSP suggested as a secure File Sync and Share solution. Through providing one central location for storing data in the cloud, CloudFileSync would improve productivity and make it easy to access company files and data from any location, using any device.
CloudFileSync also provided additional features including:
The CloudFileSync solution was managed by the MSP and the Agency was comfortable knowing the data was secure and hosted by the MSP in a data centre located in Sydney. With the data stored in Australia, the client knew the CloudFileSync solution met privacy, security and compliance requirements.
Below are the full details of the CloudFileSync solution deployed for the Agency:
No other solution empowers the reseller so completely. With flexible deployment options, self-hosting capabilities, an intuitive management console and strategic pricing models, we ensure our partners have every advantage to successfully sell and generate high recurring margins.