Security

File sharing security controls and US framework guides

Find guidance on protecting business files and evaluating a proposed transfer against your organization’s security requirements.

Start with your situation

Start with a representative release

Identify the data, receiving system and person who approves access. Select the control or framework guide that addresses your review.

Understand file protection

Explore the role of encryption within a wider sharing process.

First checkAlso review recipient authentication, permissions and how access is removed.

Explore this approach 02

Review exchange evidence

Explore the activity information your team may need after a handover.

First checkDecide which events matter and how someone will investigate an unexpected action.

Explore this approach 03

Assess a security program

Explore file exchange within an information security management approach.

First checkConnect the workflow to your organization’s risk assessment, ownership and review process.

Explore this approach

Explore the full collection

Search the guides

Search this collection

Regulated business & government

21 CFR Part 11

Explore 21 CFR Part 11 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore 21 CFR Part 11

CJIS

Explore CJIS guidance, the questions to ask and the evidence to review for your file exchanges.

Explore CJIS

CMMC

Explore CMMC guidance, the questions to ask and the evidence to review for your file exchanges.

Explore CMMC

DORA

Explore DORA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore DORA

FedRAMP

Explore FedRAMP guidance, the questions to ask and the evidence to review for your file exchanges.

Explore FedRAMP

FINRA

Explore FINRA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore FINRA

FIPS

Explore FIPS guidance, the questions to ask and the evidence to review for your file exchanges.

Explore FIPS

FIPS 140-3

Explore FIPS 140-3 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore FIPS 140-3

GLBA

Explore GLBA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore GLBA

GxP

Explore GxP guidance, the questions to ask and the evidence to review for your file exchanges.

Explore GxP

HIPAA

Explore HIPAA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore HIPAA

ITAR

Explore ITAR guidance, the questions to ask and the evidence to review for your file exchanges.

Explore ITAR

NIST SP 800-171

Explore NIST SP 800-171 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore NIST SP 800-171

PCI DSS

Explore PCI DSS guidance, the questions to ask and the evidence to review for your file exchanges.

Explore PCI DSS

SEC Rule 17a-4

Explore SEC Rule 17a-4 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore SEC Rule 17a-4

SOX access controls

Explore SOX access controls guidance, the questions to ask and the evidence to review for your file exchanges.

Explore SOX access controls

Privacy & cloud

CCPA

Explore CCPA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore CCPA

ISO 27017

Explore ISO 27017 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore ISO 27017

ISO 27018

Explore ISO 27018 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore ISO 27018

ISO 27001

Explore ISO 27001 guidance, the questions to ask and the evidence to review for your file exchanges.

Explore ISO 27001

PIPEDA

Explore PIPEDA guidance, the questions to ask and the evidence to review for your file exchanges.

Explore PIPEDA

Protect the exchange

Encrypted File Sharing

Understand encryption within the wider file-sharing process.

Explore Encrypted File Sharing

File exchange with audit trails

Review the activity record behind an external exchange.

Explore File exchange with audit trails

Private file sharing

Limit access to the intended participants.

Explore Private file sharing

Secure Data Storage

Distinguish storage safeguards from controls on external sharing.

Explore Secure Data Storage

Secure evidence sharing

Organize sensitive evidence and its delivery to approved recipients.

Explore Secure evidence sharing

Send Files Securely

Bring recipients, access conditions and delivery into one process.

Explore Send Files Securely

Make a more informed decision

Use three layers for a more useful security review

Identify the information owner

Record who can approve the release, what the recipient needs and whether unrelated records can be removed.

Exercise the access settings

Use a sample file to check the invitation, permissions and expiry from the recipient’s side.

Ask for evidence with a defined scope

Match supplier documentation to the service, version and configuration you intend to use. Keep unresolved questions with the review owner.

Example: reviewing a supplier exchange

Start with a technical package and named receiving team. Review the access conditions and activity record, then map the remaining questions to your internal assessment. Keep product demonstrations and documentary evidence connected to that same scenario.

Make your next exchange clearer

Discuss a sample file exchange

Talk to our team