Community Design Workshop Notes - Security

Global level

• Network security + architecture
• Hosted data issues
• Encryption
• Data sharing
• Backups
• Redundancy
• Disaster Recovery
• Authentication

Logins

• Single sign-on
• Visitor/guest access
• Temporary access
• Affiliated access

Collaborative environments

• Joint-shows/Co-curated exhibitions
• Planning documents
• Facilitate collaboration across institutional boundaries
• Teaching
• Learning

Seamless integration with lDAP and other authentication services

Role-based profiles for create, read, update, delete

Institution must define what is 'sensitive'

Security groups

• Individuals may be part of multiple groups or have multiple roles

Audit

• At individual level
• History of change is important

Field-level security

• Associated with workflow
• Fine grained

No real 'deletes'

• Archive instead of discard
• Maintain data integrity
• Support roll back to previous state

Physical security for museum locations + requirements for storage

• Very similar to other sectors
• Enforce security through policy
• Manage change, approve change, etc.