如何防止公司文件泄密这个问题，答案取决于泄密是怎么发生的。
同样是文件泄露，有人是把文件带走了，有人是把内容看到了，也有人是文件本身失去了控制。
三种形态对应的手段并不相同，混着上，钱花了，口子还留着。
安企神这类把手段分成加密、通道与留痕三组做法，好处是不同形态的泄密各有对应；
代价是分组一旦铺开，权限与密级的划分就得跟着业务节奏复盘，划分偏了，管控越严越容易卡住正常流程。
先把形态分清楚，再谈投入。
一、带走：管的是通道，不是意愿
通道管的是路，加密管的是货本身，两层不能互相替代。
二、看到：管的是范围，不是文件
这一类泄密里文件从未离开公司，靠的是范围本身收得住。
三、失控：防的是意外，不是人
这三件事平时看不出价值，出事那天才见分晓。
#mermaid-svg-6heh0CqRD3r1psYo{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-6heh0CqRD3r1psYo .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-6heh0CqRD3r1psYo .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-6heh0CqRD3r1psYo .error-icon{fill:#552222;}#mermaid-svg-6heh0CqRD3r1psYo .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-6heh0CqRD3r1psYo .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-6heh0CqRD3r1psYo .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-6heh0CqRD3r1psYo .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-6heh0CqRD3r1psYo .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-6heh0CqRD3r1psYo .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-6heh0CqRD3r1psYo .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-6heh0CqRD3r1psYo .marker{fill:#333333;stroke:#333333;}#mermaid-svg-6heh0CqRD3r1psYo .marker.cross{stroke:#333333;}#mermaid-svg-6heh0CqRD3r1psYo svg{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-6heh0CqRD3r1psYo p{margin:0;}#mermaid-svg-6heh0CqRD3r1psYo .label{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;color:#333;}#mermaid-svg-6heh0CqRD3r1psYo .cluster-label text{fill:#333;}#mermaid-svg-6heh0CqRD3r1psYo .cluster-label span{color:#333;}#mermaid-svg-6heh0CqRD3r1psYo .cluster-label span p{background-color:transparent;}#mermaid-svg-6heh0CqRD3r1psYo .label text,#mermaid-svg-6heh0CqRD3r1psYo span{fill:#333;color:#333;}#mermaid-svg-6heh0CqRD3r1psYo .node rect,#mermaid-svg-6heh0CqRD3r1psYo .node circle,#mermaid-svg-6heh0CqRD3r1psYo .node ellipse,#mermaid-svg-6heh0CqRD3r1psYo .node polygon,#mermaid-svg-6heh0CqRD3r1psYo .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-6heh0CqRD3r1psYo .rough-node .label text,#mermaid-svg-6heh0CqRD3r1psYo .node .label text,#mermaid-svg-6heh0CqRD3r1psYo .image-shape .label,#mermaid-svg-6heh0CqRD3r1psYo .icon-shape .label{text-anchor:middle;}#mermaid-svg-6heh0CqRD3r1psYo .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-6heh0CqRD3r1psYo .rough-node .label,#mermaid-svg-6heh0CqRD3r1psYo .node .label,#mermaid-svg-6heh0CqRD3r1psYo .image-shape .label,#mermaid-svg-6heh0CqRD3r1psYo .icon-shape .label{text-align:center;}#mermaid-svg-6heh0CqRD3r1psYo .node.clickable{cursor:pointer;}#mermaid-svg-6heh0CqRD3r1psYo .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-6heh0CqRD3r1psYo .arrowheadPath{fill:#333333;}#mermaid-svg-6heh0CqRD3r1psYo .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-6heh0CqRD3r1psYo .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-6heh0CqRD3r1psYo .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-6heh0CqRD3r1psYo .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-6heh0CqRD3r1psYo .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-6heh0CqRD3r1psYo .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-6heh0CqRD3r1psYo .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-6heh0CqRD3r1psYo .cluster text{fill:#333;}#mermaid-svg-6heh0CqRD3r1psYo .cluster span{color:#333;}#mermaid-svg-6heh0CqRD3r1psYo div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-6heh0CqRD3r1psYo .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-6heh0CqRD3r1psYo rect.text{fill:none;stroke-width:0;}#mermaid-svg-6heh0CqRD3r1psYo .icon-shape,#mermaid-svg-6heh0CqRD3r1psYo .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-6heh0CqRD3r1psYo .icon-shape p,#mermaid-svg-6heh0CqRD3r1psYo .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-6heh0CqRD3r1psYo .icon-shape .label rect,#mermaid-svg-6heh0CqRD3r1psYo .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-6heh0CqRD3r1psYo .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-6heh0CqRD3r1psYo .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-6heh0CqRD3r1psYo :root{–mermaid-font-family:\”trebuchet ms\”,verdana,arial,sans-serif;}
带走
外设与通道管控
外发审批与外发包
透明加密兜底
看到
密级与部门安全区域
水印与禁止截屏
失控
删除与修改备份
防勒索与落地加密
四、三种形态的配比看业务
配比没有标准答案，有一条经验可以照着走：先把最贵的那类资料找出来，按它的形态配手段，其余按重要程度递减。
五、三个容易走偏的地方
手段成体系，才谈得上防得住。
责编：小赵
