SP Product box shot

Coming Soon

An innovative security and governance solution for SharePoint will soon be available here.

Improve Compliance and Risk Management

Protect Business-Critical Information and Processes.

Please contact info at SharePoint2007Security.com for more information.

Security Guidance

Posted on 20. Apr, 2009 by Tristan

Achieving a secure SharePoint environment.

Title Link
Administration accounts and roles

Administration can occur at a number of levels of granularity in SharePoint. Microsoft refers to this as a three-tier administration model.

The broadest, most powerful tier is that of Farm-level Administrators. This type of account provides control over the entire SharePoint farm.

 Read more...
Authentication options

Authentication is the process of determining who someone is.

 Read more...
Business Data Catalog (BDC) security

Generally, line-of-business (LOB) system security integration requires

 Read more...
File Classification Infrastructure in Windows Server 2008 R2

Introduction

A new "File Classification Infrastructure" service has been introduced into Windows Server 2008 R2. It is used to classify and act upon files based on their business value, and is aimed at reducing administrative burden while increasing policy compliance.

 Read more...
Firewall rules and protocol usage

SharePoint uses the HTTP protocol and proprietary Microsoft extensions to it for most client-server communication.

 Read more...
Section 508 Compliance with SharePoint

Section 508 of the 1998 Amendment to the Rehabilitation Act covers accessibility for systems in the United States Federal sector, including systems developed, maintained, used, or procured by US Federal agencies.

 Read more...
Security considerations for MS SQL Server database with SharePoint

SharePoint uses MS SQL Server for two purposes:

  • Content database - used to store and manage SharePoint content
  • Configuration database   - used to store the global configuration settings for the associated SharePoint form.

 

 Read more...
Security standards, authorization policies, and models

Authorization Policies

Organisations define security policies.

Some example business rules derived from policy are:

 Read more...
SharePoint 2010 Sneak Peek

Microsoft have just released a "sneak peek" into the new features coming with SharePoint 2010 at  http://sharepoint.microsoft.com/2010/Sneak_Peek/Pages/Overview-Video.aspx .

 Read more...
SharePoint Audit Logging and other Logs

SharePoint and associated components produce a large number of logs.

 Read more...