Data transfer via USB drives or external hard drives
Learn about the risks of transferring data via USB drives and external hard drives and the good practices for protecting sensitive information.
GEDOC
01/04/2025
Knowledge · Cybersecurity
Cybersecurity in document management
Cybersecurity in document management protects the information that proves compliance: company, worker and equipment documents, audit logs and personal data. A single breach can stop operations, expose contractor data and compromise audits.
In brief
What to protect on a document management platform
Phishing, ransomware and unauthorised access are real risks. Therefore, there are four fronts to cover.
01
Access
Multi-factor authentication, profiles with the least privilege possible and regular permission reviews.
02
Data
Encryption in transit and at rest, as well as tested backups.
03
Traceability
Audit logs that show who accessed, changed or approved each document.
04
Suppliers
Security and data protection requirements in SaaS contracts, especially when the platform processes worker data.
Knowledge
Articles on cybersecurity in document management
Authentication, access control, ransomware and backups in document management.
Intrusion detection and prevention systems (IDS/IPS)
Find out how IDS and IPS systems monitor the network, detect anomalous behaviour and block intrusions in real time.
GEDOC
25/03/2025
IAM explained: What it is and what it is used for
Find out what IAM (identity and access management) is, how it authenticates users and sets permissions, and why it strengthens security.
GEDOC
04/03/2025
SSL/TLS certificates: The foundation of secure digital communications
Find out how SSL/TLS certificates work and why they are the foundation of security and trust in digital communications.
GEDOC
26/02/2025
File integrity verification methods
Discover the main file integrity verification methods and how they ensure that information has not been improperly altered.
GEDOC
18/02/2025
Real-time monitoring to detect suspicious activity
Discover how real-time monitoring detects suspicious activity and enables an immediate response to threats on document management platforms.
GEDOC
11/02/2025
HTTPS spoofing attacks: How they work and how to prevent them
Find out how HTTPS spoofing attacks work and how certificate validation and good encryption practices help to prevent them.
GEDOC
07/02/2025
HTTPS certificates: Guaranteeing privacy and data protection
Learn how HTTPS encrypts communication between users and servers and protects data against unauthorised interception.
GEDOC
21/01/2025
IPsec protocol: Fundamental protection for document management
Learn how the IPsec protocol ensures the confidentiality, integrity and authentication of data transmitted over IP networks.
GEDOC
14/01/2025
How AISP helps
The right permissions for the right people
AISP administers the platforms it implements, including user profiles and permissions. However, it does not store documentation: it only consults what its tasks require.
Frequently asked questions
Frequently asked questions
Does AISP keep copies of our documents?
No. Documentation stays in the data centres where the technology partners operate the platforms; AISP only consults what its tasks require.
Is multi-factor authentication really necessary?
Without it, a single compromised password gives access to critical documents. That is why it is one of the first measures to require.
What should you require from the platform supplier?
Where the data sits, how the supplier encrypts it, how it makes and tests backups, and which audit logs exist. The contract should also include all of these requirements.
Who has access to your contractors' documentation today?
Show us how you set up access on your platform. We will show you how AISP keeps it in order.