Torsion Information Security Blog

Exploring the business and technical implications of information security.

Case Study: Access to files and folders for temporary job roles

A public sector agency is using the latest automated data access control from Torsion to securely assign temporary access to data as their workforce changes and adapts in the current climate.

As working patterns, locations and responsibilities evolve, so does the information a member of staff needs access to. Throughout the pandemic, one particular organisation has relied on Torsion to securely re-assign access so their teams can continue to work as flexibly as possible. 

When a team member takes on a new responsibility, the organisation needs to ensure they can carry out their role by having access to the right information. They need to make sure everybody had access to the right files and folders.

Granting temporary access to internal data, within a collaboration platform such as Teams or Sharepoint can often be a logistical headache however. First establishing who needs access to what information; then updating permissions manually; and finally revoking that access once it is no longer needed. There can often be a period of a couple of weeks where employees can’t do their job effectively as they don’t have access to the information they need. If access is not revoked when the temporary roles end, it leads to out of control access and potential security breaches.

This is the situation now facing many businesses taking on temporary workers or delegating workloads.

The agency started using Torsion to automatically manage their files and folder permissions last year. Torsion integrates with their Teams platform to monitor access, alert business users to any security issues and remove access when it is not needed.

Within the Torsion platform, the agency can grant temporary access to files and folders for a set period of time. Torsion automatically works out what information a team member might need, in addition to their existing permissions, and grants them access for a fixed number of days. At the end of the period the access is automatically revoked.

The temporary team members are up and running with everything they need almost immediately, and the company has a clear audit trail of who has access to what information, when and why.

Peter Bradley of Torsion says: “Organisations are having to react to highly transient workforces and different ways of working. Only with automation will businesses be able to stay in control of their data and act swiftly to ensure their teams have appropriate access without compromising their data security.”

Stay up to date!

Sign up to get Torsion news directly to your inbox in handy bite size chunks.

    I want to know more
    close slider

      Sounds interesting, send me a bit more info...