Are Your Company Videos Truly Secure? Introduction

Today’s business communication is mostly—if not entirely—digital, encompassing various media such as email, chat, and video. Given the proliferation of video and the size of video files, it’s no wonder we produce 44 times the amount of data we produced back in 2009 . And though we can communicate much easier and faster than ever before, digital communication comes with one considerable drawback: data breaches. Data breaches have become much more common and much more malicious than in the past. According to Forbes, more than 4 billion records were exposed by data breaches within the first half of 2019, resulting in substantial losses, monetary and otherwise.

So how can you know if your company are truly secure? Start by answering the next 11 questions:

Who owns your video copyrights?

Who can claim ownership over your video content? You may be tempted to think the answer is “whoever uploaded it to a website.” However, in most cases, this is untrue. When you upload a video to a video hosting site such as YouTube, for example, you consent to its Terms of Use, which includes a royalty-free license and the right to copy and/or alter your videos. As a result, you have no legal claim on “your” video content. Not only does it render your content vulnerable, but it may also be deemed as a compliance violation (for example, intellectual property rights and/or data protection regulations with unforeseeable legal consequences).

Using an enterprise video platform, companies maintain exclusive intellectual property rights, which is particularly vital in many industries (such as pharma or tech) or video use cases (corporate learning).

Can you set IP address restrictions for your video content?

Can you set IP address limitations in order to prevent anyone outside a specific network from accessing your video content? Such a process requires configuration efforts as well as knowledgeable personnel. An enterprise video platform allows you to set IP range protection by defining IP ranges (a whitelist).

Can you set geo-restrictions for your video content?

Can you set geographic limitations for your videos in order to make sure that playback isn’t available in certain countries? In some cases, the playback of video content must be prevented (e.g., due to country-specific copyright).

However, this, again, requires configuration efforts and is a laborious process. An enterprise video platform allows companies to restrict access to their video content by geo-blocking specific countries and even regions.

Can you set referrer protection for your video content?

Can you set embedding limitations for video content, making sure that videos can only be embedded into specific, approved websites? Companies must often set such restrictions when configuring a security policy.

However, in most cases, this is a complicated process that requires IT intervention and configuration efforts. Using an enterprise video platform, companies can single-handedly set up referrer protection, triggering a “This video is not available” message upon playback.

Is your video data encrypted?

If unauthorized parties somehow do gain access to your sensitive videos, can they view them? Secure Sockets Layer (SSL) encryption provides an added security layer, whereas usually, data transmitted between browsers is sent as plain text, making it more vulnerable to eavesdropping. Using an enterprise video platform, users’ videos and related data is encrypted through an SSL certificate.

 

Can you access your videos via SSO?

Single sign-on (SSO) is a centralized authentication process in which a user gains access to a variety of corporate assets upon providing one set of login credentials. This is a common enterprise requirement since it enhances security while improving user experience and alleviating workload on IT departments.

Using an enterprise video platform, companies can set one login credentials to access their video portal and related assets, facilitating the process for all employees.

Can you maintain data protection compliance for all videos?

Can your IT infrastructure guarantee end-to-end data protection and compliance? All your videos and related data must be stored as per European Data Protection directives. Consequently, operators of content delivery networks (CDN) must be able to prove that their infrastructure complies with EU data protection regulations within Europe and as outside of it.

An enterprise video platform helps companies comply with data protection protocols. Not only does it cover a host of internal and external privacy and security processes, but it’s also easy to implement, following the Privacy by Design standard. Learn more.

 

Are your videos downloadable?

Can viewers download your video on their device? While this isn’t necessarily a bad thing, depending on the context and video, it’s also essential to be able to restrict video download. Allowing viewers to download videos containing internal video communication, for example, not only exposes users to copyright infringement but also data leakage.

Back in 2017, a video featuring an early version of the iPhone X was posted on YouTube by an Apple engineer’s daughter. The video also revealed some QR codes and a text file of code names for unreleased Apple devices. Given the media circus, we can only imagine the damage, financial and otherwise, Apple had to endure.

An enterprise video platform includes a download release option that is disabled by default, ensuring that no video can be downloaded and shared unless intended.

How do you authenticate a user?

Can you make sure that the person trying to access your video is indeed who they claim to be? To be given access to video, playback, or otherwise, they first need to be authenticated by the network whose goal is to differentiate legitimate from illegitimate users. There are plenty of authentication methods, from a classic, password authentication to token authentication to computer recognition. Companies often use password-protection in conjunction with another authentication method, such as SSO, to enhance security.

Using an enterprise video platform, admins can define their authentication process as well as set restrictions based on a user’s IP, location, or domain.

 

Who can view, share, or make changes to your videos?

Who would you like to be given access to your corporate videos, and to which extent? In many cases, companies seek to provide an individual or a group with partial access to video content. For example, allow playback yet not sharing. Assigning rights and roles helps companies to ensure their videos aren’t edited, deleted, or shared by unauthorized parties.

An enterprise video platform empowers admins to issue user rights in a granular way. Consequently, they can enhance transparency while simplifying the administrative process.

 

Where are your videos stored?

Do you store corporate videos on a public-facing platform? Maybe a shared drive or internet local-area network (LAN)? Either way, your solution is probably not ideal.

A shared drive and LAN are not built to support heavy files like video, whereas storing internal, sensitive content on a public video platform—such as YouTube or Vimeo—may jeopardize your internal communication since such platforms are public by design and don’t conform to an enterprise-level security standard. An enterprise video platform is an optimal solution for internal video storage as it’s private by design.

Choosing a SaaS video platform further allows companies to scale their data storage capacity up or down as well as benefit from multiple levels of protection. Learn more.

We’ve created a free, illustrated summary of the video security topic: Click here to download our Video Security Infographic.