IRM-Prot-On

Short Summary

Enterprise information protection has become a top priority as organizations move from on‑premises communication and documentation to a “post‑perimeter” reality where users access data from mobile devices, offsite locations, and through extensive collaboration with external entities. Traditional perimeter defenses are insufficient because every access point to enterprise data becomes a potential attack vector. At the same time, businesses must store, analyze, and share more information to operate effectively, from supply chain coordination to customer identity management, making the tension between availability and protection central to modern security strategy.

Two primary forces drive adoption: protecting intellectual property that must be shared with external professionals (e.g., legal and marketing) and meeting regulatory obligations for sensitive and personally identifiable information (PII) under regimes such as GDPR and CCPA. Effective solutions must provide strong protection while remaining flexible enough to support varied collaboration patterns. Encryption commonly applies at folder or file level, across repositories that are increasingly cloud-based, with fine-grained control over usage.

IRM-Prot-On (acquired by Grupo CMC in 2017) is positioned as an enterprise information protection solution combining document encryption, rights management, tracking, and classification. It supports permissions (read/print/edit/copy), device restrictions, document validity windows, controlled offline use, automatic folder monitoring, and integrations via REST API, LDAP/Active Directory provisioning, SSO federation (SAML2), Syslog, and optional SOC monitoring that flags atypical behavior. Deployment can be managed service, hosted, or on-premises, with stronger key control via on-prem plus HSM.

Key differentiators include maintaining permissions in file metadata across copies/renames and the ability to revoke specific users’ access across all copies without reissuing a new file version. Noted gaps include limited repository-level classification, basic fine-grained controls, and reliance on Office plug-ins for full functionality, alongside a relatively limited partner ecosystem.

Interesting Facts

• Information protection has climbed to a high-ranking priority in enterprise security.
• Enterprises increasingly access corporate information via mobile devices, including privately owned and corporately owned devices.
• Two broad drivers of information protection are intellectual property protection and sensitive information regulation.
• Sensitive information includes business process information and private information about staff, partners, and customers.
• GDPR and CCPA are cited as high-profile regulations that increase compliance and reputational pressure for handling PII.
• IRM-Prot-On was acquired by Grupo CMC in 2017.
• IRM-Prot-On supports access federation integrations with web SSO and SAML2.
• Managed documents can be stored locally or on services such as Dropbox, OwnCloud, and Google Drive.
• Files processed by the service are encrypted and stored with a file extension identifying them as “protonized” files.
• Google Docs is not supported.

Notable Quotes

• “Perimeter protection is no longer adequate, leading to the release of many enterprise information protection solutions.”
• “Protecting enterprise information while still making it available for varied use is therefore paramount.”
• “Intellectual property is increasingly coming under threat.”
• “Equally, protecting sensitive information is no longer optional.”
• “The ‘post-perimeter’ age of security means that every interface with enterprise data is a potential attack vector”
• “Documents both in motion and at rest are encrypted”
• “Multiple copies can be made with the permissions maintained even if the file name is changed.”
• “Atypical behavior is flagged and an alert is sent to data administrators.”
• “A competitive element is the ability to revoke permissions to specific users for all copies of a file without needing to revoke all permissions and distribute a new version of the file redefining permissions.”
• “IRM-Prot-On generally has a high ease of use and delivers a strong security solution with wide functionality with attention to integration needs and interoperability standards.”