Information Rights Management
The Czech National Bank (CNB) guards access to sensitive information in distributed electronic documents by using Oracle Information Rights Management. Thanks to this solution, sensitive information handled by, for example, the CNB Bank Board or auditors is better protected both within and outside of the CNB's network. Access rights to documents are centrally managed and can be changed, even if the given document is outside of the CNB's network.
Challenges
- Protection of sensitive documents whose premature release could lead to significant problems and damages resulting in the threatened stability of supervised markets - for example, information on prepared measures in the area of supervision, prepared exchange-rate adjustments or measures pertaining to individual financial entities.
- Assurance of protection of sensitive documents stored outside of the CNB's internal network (flashdisks, CD/DVD, notebooks, etc.) against unauthorised copying.
- Improved protection of the content of sensitive documents stored in the CNB's internal network.
- Possibility of dynamic central administration of access rights - assignment and revocation of rights.
- Possibility of detailed auditing of access to protected document.
Solution
Profinit delivered to the Czech National Bank a solution built on Oracle IRM. The required security level was achieved while preserving the necessary flexibility in working with documents.
- Users do not have to learn how to use a new and complicated application; as previously, they use ordinary office applications and e-mail clients.
- Thanks to central administration, it is possible to modify access rights, even if a given document is located outside of the CNB's internal network; when working in offline mode outside the CNB's security perimeter, access rights are validated by the Oracle IRM server.
- It is possible to create reports for auditing purposes - the responsible workers have an overview of when, how and by whom documents containing sensitive information were handled.
- Hundreds to thousands of documents are thus protected.

