Posts

Security Breach? There are Apps for That

 

security-checkHere’s a Story …

Emily tells Dan about a cool app on her iPhone that helps her stay organized when she is out of the office.  Dan looks it up and downloads it to his Android phone.  The App is cheap and has great reviews.  When Dan installs the app, he gets a screen about permissions with only a few items listed.  He scans the list.  Dan is not a techie and the list seems reasonable; he clicks “Allow” and the installation finishes.  Dan uses the app and is happy.  Over the next few weeks, Dan has trouble finding docs he saved in Google Drive.  Some were uploaded Word and PDF files, while others were created in Google Docs and Sheets. Asking IT for help, they find some documents in the trash, others appear gone for ever.

Here’s the Lesson …

When Dan installed his cool new app, he granted the app full access to the content of his Google Drive account and to other content in Google Apps.  The app had a bug (we do not want to assume malice) that set all of Dan’s files to public on a periodic basis.

Third party applications, including mobile apps, create a security and privacy risk for your Google Apps environment.

Here’s the Offer …

Partnering with CloudLock, we will conduct a Google Apps Security Health Check for your Google Apps for Business or Government Domain.  Normally costing $1,000 to $5,000 (or more!), through September 30, 2014, we will perform the check for $300 (or less!).

Please click here for more information or to request your Google Apps Security Health Check.

Drive vs Docs = New Google URLs

google drive
Google Drive and Google Docs are no longer the same thing.  As Google expanded the file service capabilities of Drive, Docs and Drive were separated to better reflect Docs as the office productivity tools and Drive as the secure file service.

Recently, Google made changes to ensure this distinction is evident in the URLs we use to access these services.

  • drive.google.com still points to Google Drive, and drive.google.com/a/<domain> still takes you to your Google Drive page
  • docs.google.com will soon point to a new Google Docs homepage that takes you directly to the Google Doc apps

We recommend updating your bookmarks as well as your custom URL mappings.

If you need a hand with your custom URL mappings, please let us know.

5th of 5: More Ways to Collaborate in Google Apps

Hangouts Icon
Google Apps is designed for secure sharing and collaborations.  Many users, however, still rely on the back-and-forth of email to get their work done.  Here is the 5th of 5 other ways to collaborate in Google Apps.

Use Google Drive with Google Hangouts

Google Hangouts is more than a basic, HD quality, audio and video conferencing system. Hangouts let you conduct one-to-one and group video and chat sessions from your desk, laptop, tablet, or smart phone.

Some project managers  have team members join a Hangout, mute themselves to work independently, and unmute when they need to integrate with team members.

Install the Google Drive script for Google Hangouts and team members can review, edit, and discuss documents during the video meeting.

Enable your team to do more with Google Apps and get more done.  They will thank you!  Contact us to learn about self-paced, live, and custom training options.

Avoiding Real Drive Security Threats


Are Your Users Letting Data Thieves in Through the Front Door?

When most organizations think about protecting files in Google Drive, they focus on Google’s security certifications, whether or not to allow external sharing, and setting up groups to make assigning permissions easier. Too often, they fail to consider the bigger risks to data: users and apps.

Users typically have the ability to share Drive content within your domain and externally. A simple user error (and the occasional intentional act) can expose sensitive data, creating headaches and potential liabilities.

Apps, whether browser extensions or on smart phones, can be installed by your users without your knowledge. These apps often request broad access to data ranging from contact lists to Drive content and can expose data before you know the apps even exist. Human nature tells us that if person wants an app, they “Allow” and “Accept” without necessary reading or understanding the permissions being granted.

Critical to securing data in Drive, organizations should monitor and manage both user permissions based on policies and content and third-party apps with access to data. An understanding of the access granted each App and whether others have deemed the App trustworthy, gives you the power to allow Apps that help your team work efficiently while blocking Apps that pose too much risk.

The First Step to closing user sharing and Apps permission risks is to audit and assess your environment. Audit user assigned permissions and third-party Apps with access and review the results for potential data security issues.

With an understanding of the scope of your risk, you can best decide if you should further investment in your Google Apps ecosystem.

In partnership with CloudLock, we are offering great discounts on our Google Apps Risk Assessment service. Normally a $1,000 per audit service, we will examine collaboration and permission settings as well as the 3rd party Apps that already have access to your domain for $300 or less.

Contact us for more information or to request a formal quote.

Enterprise Grade Managed File Services


Go Beyond Sharing and Permissions

When many look at the collaboration and sharing within Google Drive, they see history repeating itself as they remember the early days of peer-to-peer networking.

After all, how do you create a folder in Drive and have it appear the same for each user?

You need to create the folder, share it, and ask everyone to drag it under “My Drive”. Even then, users can create and share folders with identical names, creating confusion as to which is the central folder.

Until we adapt to new ways or thinking about information location, ownership, and sharing, most businesses want a centralized, managed file service.  The ability to ensure all authorized users have access to a folder in the same way, with appropriate permissions is key.

Until now, this has been nearly impossible to accomplish.

Partnering with Altirnao, we are launching AODocs, an  enterprise grade system for creating a managed file service over, and using, Google Drive. AODocs lets you create and assign folders across your user base (just like your old-school file servers), add and search custom meta data, and, optionally, create work flows.

AODocs leverages the Drive infrastructure and the Google Drive sync client, helping keep the system affordable for smaller organizations.

If we have peaked your interest, contact us and we can schedule a demonstration, or catch this month’s 3T@3 Webcast (on July 22nd, the 4th Tuesday this month).

4th of 5: More Ways to Collaborate in Google Apps

docs
Google Apps is designed for secure sharing and collaborations.  Many users, however, still rely on the back-and-forth of email to get their work done.  Here is the 4th of 5 other ways to collaborate in Google Apps.

Comments and Real-Time Chats in Google Docs

You already know that, with permission, colleagues can view and edit shared documents together in real-time.  They can also engage in real-time chat from directly within the document windows.  Instead of calling a meeting, or setting up a conference call or hangout, team members can ask questions, suggest edits, and provide feedback immediately while working on the document.

If team members are working on the document at different times, they can highlight text and add a comment.  Visible in the margin, fellow collaborators are notified by email of the comments and receive a link that opens the document at the comment.  Comments can be directed to specific team members and team members can respond to directed requests by replying to the email.

Once a comment thread is finished, or the issue resolved, mark the comment as “resolved”. While the comment disappears from view, comments remain part of the document history and can be recalled should questions arise down the road.

Helping users get the most out of Google Apps is one of the reasons we offer a range of training and professional development services.  Contact us if you want to learn more.

 

3rd of 5: More Ways to Collaborate in Google Apps

google drive
Google Apps is designed for secure sharing and collaborations.  Many users, however, still rely on the back-and-forth of email to get their work done.  Here is the 3rd of 5 other ways to collaborate in Google Apps.

Shared Folders in Drive

Instead of sharing individual files with users or groups, create a project folder and share the folder with the team.  When you share a folder, all work uploaded to the folder or created within the folder, the file automatically is assigned the same sharing settings as the folder.

Project managers can still set permission levels based on need — view, comment, or edit — and you can override the inherited permissions for individual files and for sub folders as needed.

Training users to find and enter a project folder before working on the project is an easy tip that saves time and effort.

If you want to help your team get more from Google Apps, Contact us about our training options.

Restore Google Drive Files Offers Some (but not enough?) Protection

google drive
Among the myriad of new features and upgrades announced at Google I/O this week, Google added the ability to restore users’ Drive files that have been deleted from the Trash folder.

While offering some protection, the feature is limited in its scope.

  • You cannot restore individual files; you can only restore all files deleted within a date range you provide.  The minimum date range is 1 day (24 hours).
  • You can only restore files for individual users, one at a time.
  • You can only restore files that were deleted from Trash within 25 days.
  • When restoring files, the permissions are not restored.  Only the user will have access to the files.

With these limitations, we do not expect the ability to restore a user’s Google Drive files will be of great use to most organizations.  With a limited retention period and lack of granularity, the tool provides a big shovel when most users need a spoon.

The solution also depends on users’ ability to recover information from the Trash folder, a process we find difficult at times due to the limited ability to search Trash in Drive.

True backup/recovery solutions give users and administrators that critical features that deliver more usability and effectiveness:

  • Flexible retention:  Allow organizations to implement policies related document and records management, including extended retention and removal of data past retention windows.
  • File-Level / Item-Level Restore: Most data loss and restore needs result from human error or action and impact fewer than 5 files.  Acceptable restore capabilities include the ability to restore individual files (or entire accounts) and should include the ability to select file by version or point in time.
  • Protect Meta Data:  Protect the meta data as well as the files themselves.  File ownership, permissions, etc. should be preserved and recoverable with the file.
  • Data Export:  Provide the ability to export data so that it may be migrated to other accounts and/or other systems.
  • Administrative Control:  Identify and allow backup/restore administrators that are not full domain administrators.

Absent many of these features, the ability within Google Apps to restore a user’s Drive files is a limited feature that will not meet most organizations’ needs for data protection.

Third party backup/restore solutions are still a necessary and appropriate component of a robust Google Apps environment.

Feel free to contact us if you would like to explore backup/recovery options and solutions.

Vault for Drive is (Finally) Here!

Google Apps Vault
Within the announcements for Google Apps Unlimited and Google Drive for Work (more on these shortly!), are important changes to Google Apps Vault.

First and foremost, Google Apps Vault now includes Vault for Drive.  With Vault for Drive, you can immediately:

  • Search for specific users’ Drive files.
  • Preview search results in Vault to make sure you find just what you need.
  • Create copies of search results and export them for future use.

Settings retention policies, creating holds, and conducting domain-wide searches for Drive content will be available in the near future.

These new capabilities come at no additional cost for existing and new Google Apps Vault customers.

On July 8th, we are holding an open, free live webcast to provide an overview of Vault for Drive and the Admin Console features.  Please attend, or contact us if you have any questions.

 

Alternatives to MS Office

NoWindows

 

With more businesses moving to the cloud, and Google Apps in particular, one of the questions that comes up is whether organizations still need MS Office.  The fact that MS Office use is drastically lower than peceived within most companies is a subject for another post.

For many organizations, they still need a solution for existing (legacy) documents as well as documents shared with them by others still using MS Office.  The good news is that you have a number of strong competitors that are free, or very low cost, and that run across multiple platforms.  Here a few.

Kingsoft Office

Cost:  Free; Premium Edition for Windows is $69.95
Platforms:  Windows, Android, iOS, Linux

Kingsoft Office is a free MS Office compatible suite available on Windows, Android (including Samsung devices and International), iOS (iPad and iPhone), and Linux.  The suite integrates with Google Drive, as well as Box and Dropbox.

Office Suite from Mobile Systems Inc.

Cost: Android: Free or $9.99 for Premium; iOS: $1.99 (promotion; normally $14.99)
Platforms: Android, iOS

Work with and print Office format documents, as well as PDF and ZIP files.  A file manager works with local files and attachments on smartphones and tablets and can also access Google Drive, Box, Dropbox, OneDrive and SugarSync, plus sharing via email, Bluetooth and Wi-Fi Direct.

QuickOffice form Google

Cost: Free with Google Apps account
Platforms: Android, iOS

Edit Word, Excel and PowerPoint files read PDFs.  Works only with Google Drive and supports printing to Wi-Fi printers.

DocstoGo from DataViz

Cost: Free
Platforms: Android, iOS

Supports MS Office 97, 2010, and 2013 formats.  An in-app purchase is required to use Google Drive, Box, Dropbox, and OneDrive.

Polaris Office 5

Cost: Free
Platforms: Android, iOS

Allows workgroups to use email or social contacts to collaborate on documents.  Works with Google Drive, Box, Dropbox and other WebDAV sites. The iOS version supports OneDrive as well.

CloudOn

Cost: Free; Pro version for $3.99 per month includes printing
Platforms: Android, iOS

Rather than building apps to execute on the local device, the CloudOn connects to a free service that executes Office apps in the cloud, and opens and edits files there. Only screen updates and gestures go back and forth. CloudOn saves to a Google Drive, Box, Dropbox or OneDrive account.