DATA SHEETOpenText eDOCS Defense
Close the information security gap on device level encryption to more completely protect
Intellectual Property (IP) and valuable customer information. OpenText™ eDOCS Defense,a document security module for the OpenText™ eDOCS platform, empowers organizations
to encrypt sensitive documents and emails at the document library level, ensuring onlyauthorized users can view its contents. With the contents locked down, comprehensive activity
monitoring further mitigates the risk and cost of an internal breach.

Close the security
gap left by encryption
at the device level
Encrypt sensitive
information at thedocument level
Authorize users
from the OpenText™
eDOCS interface
Minimize the risk
and cost of aninternal data breach

Associated OpenTextproducts• OpenText™ Content Accessfor eDOCS• OpenText™ Business Intelligence• OpenText™ InfoFusion™
• OpenText™ Brava!™ Desktop
for eDOCS• OpenText™ Email Archivingfor Microsoft® Exchange• OpenText™ Decisiv™
• OpenText™ Axcelerate™
• OpenText™ Information Hub• OpenText™ Records Management
for eDOCS• OpenText™ RightFax™
• OpenText™ Core
• The OpenText Cloud1Ponemon Institute, 2018 Cost of a Data
Breach Study, July 2018.
²2018 Data Breach Investigation Report,
11th edition.

In today’s digital business landscape, protecting sensitive information must be a
top priority. With more than 30 percent of breaches attributed to an internal source,organizations need to review and close the gap in their security programs or facemulti-million dollar penalties and the loss of IP and customers.
eDOCS Defense provides a simple yet powerful document security module thathelps eDOCS users protect business critical and confidential customer informationfrom an internal security breach and offers two levels of security, available only
from OpenText.

First, close the security gap left by encryption at thedevice level
Unlike encryption at the device level, where sensitive information can still beviewed via server access, eDOCS Defense delivers document level encryption atrest. This ensures that not even system administrators can see the contents withoutauthorization from the eDOCS user interface. Whether on-premises or in the cloud,data is protected at the document level.

Second, pre-empt an internal breach with monitoredactivity alerts
A lot of irreparable damage can occur in the time it takes to discover a breach,
especially given the industry average of 197 days from incident to discovery. 1 And,
with 26 percent of incidents discovered by the customer, the cost of an information
breach can surpass regulatory penalties and negatively impact corporate reputation.2
With eDOCS Defense, organizations can send templated alerts before and after
sensitive information has been locked down, to further mitigate the risk and costof a data breach, even safeguarding information from authorized users. As alerts
are flexible and configurable, they can be sent to designated individuals at various
stages of a potential breach, for example at 50 percent, 80 percent or 90 percent.
These warnings can pre-empt a breach, lock out a user when they breach a rule,
limit damage and, with stored system logs, can help organizations easily meetrequired regulations.

eDOCS leads the way in document security
eDOCS provides the highest and most customizable security out of the box today.
From two-factor authentication and metadata security to authorizing user access,sharing, editing and viewing of documents, users can now add two additional layers
of protection with eDOCS Defense. For organizations looking to protect data moresecurely at the document level and close the gap that is left by encryption at thedevice level with third party solutions, eDOCS Defense is a powerful information
security module for the eDOCS platform.

FeatureDescription

Mitigate risk

• Monitor user behavior against established thresholds.
• Limit exporting, printing, downloading and emailing.
• Set granular rules with the configuration wizard.
• Send automatic notifications to initiate a breach investigation when a threshold is hit.
• Lock out users when a rule is breached.
• Encrypt data.

Encryption at rest

• Provide encryption at rest at the document level to protect against users with server access,a feature exclusive to eDOCS Defense.
• Access to document content must come from within the eDOCS interface.
• Log all activities in the document audit trail.
• Encrypt documents on back-up media to protect stolen content. If an unauthorized user hasaccess to an organization’s backed-up data, the information is rendered useless.
• Leverage encryption algorithms and security modules that are FIPS 140-2 certified.
• Rely on 256-bit AES (Advanced Encryption Standard) symmetric key encryption.
• Support for Microsoft® Windows® Server certificates.
• Support for digital certificates from a trusted certificate authority.

Activity monitoring• Create rules to monitor end user activity.
• Configure realtime alerts to monitor unusual activity and lock potential abusers out of thesystem to avoid an additional data breach.
• Define rules for monitoring activity permissions.
• Maintain a log of all alerts generated to assist with audits and other reporting requirements.

An example of encryption at rest at the document level
and what IT or unauthorized users see when looking at a
document directly in the database. The only way to decrypt
the information is from the OpenText eDOCS interface,which monitors and logs activity and can be used forautomated alerts.
OpenText eDOCS Defense

2/3Configure realtime alerts to monitor unusual activity and lockpotential abusers out of the system to avoid an additional
data breach.

Easily configure encryption at rest at the document server
level. Secure information with the same key or select uniquekeys for each server.

OpenText eDOCS
Dual factor
authentication
to log inInformation transmitted
via Secure Socket Layer(SSL) protocols

Metadata
security

Highly customizable
document level security,
including deny

Flexible folder
level security

Granular document
securityeDOCS Defense secures the entire information lifecycle, with pre-emptive(activity monitoring) to post-breach protection (encryption), leveraging
innovative and mature technology from OpenText, the market leader.

OpenText eDOCS leads the way in document security, providing the highest
and most customizable security out of the box today.

About OpenText
Join the conversation
Learn more
Join us

OpenText, The Information Company, enables organizations to gain insight throughmarket leading information management solutions, on-premises or in the cloud. For
more information about OpenText (NASDAQ: OTEX, TSX: OTEX) visit: opentext.com.

Connect with us:• OpenText CEO Mark Barrenechea’s blog
• Twitter | LinkedIn

opentext.com/contact
Copyright © 2021 Open Text. All Rights Reserved. Trademarks owned by Open Text.
For more information, visit: https://www.opentext.com/about/copyright-information • (12.05.21)18293.EN

3/3