What is IBAC?

Strategy AI's Information Based Access Control (IBAC) system ensures robust data security by managing access based on document sensitivity and user roles. This fosters a culture of accountability and respects privacy requirements.

Picture the IBAC system as a vigilant, automated sentinel, effectively managing access to files based on their sensitivity and the user's access privileges. It assigns distinct numerical tags to both documents (File IBAC numbers) and users (User IBAC numbers). A document with a lower IBAC number, like #10, is considered public, while a document with a higher number, such as #80, is designated as confidential.

In a similar vein, every user on our platform is assigned a User IBAC number, which acts like a clearance level dictating which files they can access. For instance, a user with a User IBAC number of #30 has access to files with the same or a lower IBAC number. This approach ensures users only see information necessary for their role, adhering to the Principle of Least Privilege, a core concept of data security.

brain graphicOur IBAC system serves as a protective barrier against unauthorized access to sensitive data. It allocates a level of protection to each file that's proportional to its sensitivity, ensuring employees only access data within their purview. This reduces the risk of accidental leaks or intentional breaches, while also streamlining operations by eliminating unnecessary information.

Crucially, your Account Super Admins holds the power to assign User IBAC numbers to employees, granting you the control to tailor access privileges to meet job responsibilities. This creates an efficient workspace that respects customer privacy and upholds high data security standards.

At Strategy AI, we entrust the crucial task of assigning a File IBAC number to those who best understand the content - your authorized employees that have been approved to be in a Workspace. As they upload files to our system, they assign a unique IBAC number that accurately represents the document's sensitivity level.

This practice offers several advantages. It involves your team in data governance, creating a culture of responsibility and security awareness. It contributes to a precise categorization of data, improving our IBAC system's effectiveness. Importantly, it ensures sensitive data is properly protected from the moment it enters our system.

We have found this approach to data classification instrumental in creating a secure, efficient, and effective data governance strategy, reinforcing your trust in our commitment to data security.

The dual purpose of our IBAC system is to proactively address potential security risks and maintain regulatory compliance. By managing data access based on sensitivity and user roles, we mitigate the fallout if a security breach occurs. Furthermore, the system's transparent structure helps us comply with strict data privacy laws and regulations.

The IBAC system also nurtures a culture of accountability. When users understand their access level and the nature of the information within their reach, it instills a sense of responsibility.
 

In Summary, our IBAC system represents one aspect of Strategy AI's dedication to comprehensive and flexible data security practices. We continually monitor and fine-tune our system in line with data security's evolving landscape, ensuring that we always provide you with the best possible service. With Strategy AI, you're not just investing in a product; you're partnering with a service committed to data integrity, security, and regulatory compliance.