Privacy and Access Control Issues in Financial Enterprise Content Management

Abstract

Financial Enterprise Content Management Systems (FECMS) have been recently deployed not only in intraenterprises but also over the Internet to interact with customers. As FECMS contains a lot of sensitive and confidential information, there is an urgent need for tackling privacy and access control issues in these systems. In this paper, we proceed with our case study in an international banking enterprise on these issues. The FECMS is based on Web services technologies and we demonstrate the key privacy and access control policies for internal content flow management (such as content editing, approval, and usage) as well as external access control for Web portal and institutional programmatic users. Through the modular design of an integrated FECMS, we illustrate how we can systematically specify privacy and access control policies in each part of the system with the technology of Enterprise Privacy Authorization Language (EPAL).. 0-7695-2268

Towards a business process-oriented approach to enterprise content management: the ECM-blueprinting framework

“…), improved internal and external collaboration, cost savings in information processing operations, value-added customer services, and fewer errors in products and services (Päivärinta and Munkvold 2005, p. 2). Because organisational knowledge is captured in enterprise content, ECM can further act as an enabler of sustainable knowledge management (Chiu and Hung 2005; also compare Davenport and Prusak 2000;Iverson and Burkart 2007, p. 404). Finally, one of the main drivers of ECM is the need for compliance (Swartz 2007a, p. 14).…”

Designing a Credit Approval System Using Web Services, BPEL, and AJAX

“…Next, we extend the CAS to handle security and privacy flows [9] and enhance the transaction processing of the workflows. We are also studying how semantics help exception handling.…”

Enterprise Content Management in Information Systems Research

“…There are only a few empirical studies on ECM, and quantitative studies are notably absent from the literature analyzed. Edwards: Website community, intranet/ extranet, and content management Chiu and Hung (2005) Privacy and access control for internal control flow management (e.g., editing, approving, and processing content) in financial ECM O' Callaghan and Smits (2005) ECM as an integrated approach to content management and document management; ECM strategy development process (e.g., content audits) ECM issues, objectives, and components; ECM compared to information resource management, knowledge management, and document management ECM issues and challenges (e.g., change management, collaboration); ECM compared to its reference areas (e.g., knowledge management) Strategic development and implementation process of ECM (e.g., strategy, feasibility study, solution scenarios, and pilot implementation) Framework for implementing information portals in large organizations; user segmentation for improved planning of implementation effort Research framework of ECM that distinguishes four perspectives: content, processes, technologies, and the enterprise context Chu et al (2009) Mechanisms for content abstraction and annotation; semantic-based approach to content management; creation of meta-content as a critical procedure of ECM to favor inductive rather than deductive research designs, and it is seldom grounded in theory. The aforementioned Statoil case narrative, for instance, covers only the initial phases of ECM implementation (Nordheim and Päivärinta 2006, p. 654), so it does not provide ultimate answers to how ECM systems influence organizational performance.…”

“…Perhaps most noteworthy is the ECM security issues that Kwok and Chiu (2004) and Chiu and Hung (2005) discuss. Perhaps most noteworthy is the ECM security issues that Kwok and Chiu (2004) and Chiu and Hung (2005) discuss.…”

“…Chiu and Hung (2005) study financial ECM systems and understand access control ''as the mechanism by which users are permitted access to resources according to the authentication of their identities and the associated privileges authorization'' (p. 1). Chiu and Hung (2005) study financial ECM systems and understand access control ''as the mechanism by which users are permitted access to resources according to the authentication of their identities and the associated privileges authorization'' (p. 1).…”