{"id":1359,"date":"2020-03-19T13:26:32","date_gmt":"2020-03-19T13:26:32","guid":{"rendered":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/?p=1359"},"modified":"2020-03-19T13:38:57","modified_gmt":"2020-03-19T13:38:57","slug":"the-top-4-security-principles-for-true-bi-security","status":"publish","type":"post","link":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/?p=1359","title":{"rendered":"The Top 4 Security Principles for True BI Security"},"content":{"rendered":"<div class=\"elementor-element elementor-element-1d18090 elementor-widget elementor-widget-theme-post-content\" data-id=\"1d18090\" data-element_type=\"widget\" data-widget_type=\"theme-post-content.default\">\n<div class=\"elementor-widget-container\">\n<div class=\"elementor-element elementor-element-1d18090 elementor-widget elementor-widget-theme-post-content\" data-id=\"1d18090\" data-element_type=\"widget\" data-widget_type=\"theme-post-content.default\">\n<div class=\"elementor-widget-container\">\n<p>We have put together a handy guide for BI developers Top 4 Security Prnciples so that you know your data is secure!<\/p>\n<p>Process Level Security<\/p>\n<p>The overall set of controls, test and procedures a system uses to safeguard data. Any BI vendor you consider should follow all the major industry standards here.<\/p>\n<p>That means checking for vulnerabilities using the DREAD methodology, deploying Secure Development Life Cycle (SDLC) methodology, and running regular audits and penetration tests, in line with the OWASP testing guide. This last one should be conducted externally, so you know they\u2019re not cheating.<\/p>\n<p>System Level Security<\/p>\n<p>This covers who has access, and to what \u2013 i.e. authentication, permissions and user management for the application. At a basic level, your BI platform should allow you to offer different level of access, depending on whether you want the user to view or create dashboards, or manage whole data projects. Encryption for data, account credentials and authorization profiles is essential.<\/p>\n<p>Also, keep an eye out for integrations with your active directory, with other platforms using Single Sign-On (SSO), and REST API to customize security settings. These will make it far easier to keep your BI in sync with your organization\u2019s security standards.<\/p>\n<p>Object Level Security<\/p>\n<p>This refers to tools that manage access to different components within the platform. For example, in Sisense\u2019s case, admins control which users or groups can access or edit each dashboard and Elasticube.<\/p>\n<p>Data Level Security<\/p>\n<p>Now we\u2019re down to the nitty-gritty, determining precisely which data inside each data source each individual user can see.<\/p>\n<p>A sophisticated BI program will allow you to use row level security to define exactly what each user sees in a dashboard that\u2019s been shared with them, or prevent new starters from accessing certain data until they\u2019ve been added to the right group. That way, you don\u2019t hand over the keys to the kingdom until they\u2019ve earned your faith.<\/p>\n<p>No matter what case works best for you and your cliental an efficeint security set up is critical to your BI platform development.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>We have put together a handy guide for BI developers Top 4 Security Prnciples so that you know your data is secure! Process Level Security The overall set of controls, test and procedures a system uses to safeguard data. Any BI vendor you consider should follow all the major industry standards here. That means checking&hellip;<\/p>\n","protected":false},"author":2,"featured_media":1368,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[],"_links":{"self":[{"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/posts\/1359"}],"collection":[{"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1359"}],"version-history":[{"count":0,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/posts\/1359\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=\/wp\/v2\/media\/1368"}],"wp:attachment":[{"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/integrity3d.co.uk\/portfolio\/datoresmart\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}