Page tree




ForumPass OFFICIAL Overview

Overview

Combining efficiency, security, and compliance, Exostar’s ForumPass OFFICIAL meets all 14 Cloud Security Principles and enables organizations to work together in a shared internet-based, collaborative workspace.  Built on Microsoft SharePoint and protected by multi-factor authentication, this solution has additional security features that make it one of the most secure online collaborative platforms available.  It delivers robust functionality, including end-to-end encryption, through an easy-to-use, intuitive user interface.  ForumPass OFFICIAL functions the same as ForumPass, but requires Medium Level of Assurance (MLOA) Software certification to access the solution.


With integrated collaborative functionality and 24/7/365 global availability, the solution enables organizations to exchange business-critical documents such as engineering drawings, proposals, specifications, project information and more with external partners and geographically dispersed teams.  Users benefit from improved communication, better quality, faster cycle times, and significant cost savings, all while maintaining compliance with UK government security requirements.


An Encrypted Library is a library type available only on Sensitive, Restricted, Protected, and OFFICIAL site templates.  The Encrypted document library offers all the same functionality as a standard document library; in addition, all documents uploaded in an encrypted library are end to end encrypted (E2E).  The Java applet (version 5.0 or higher) must be installed on the user’s computer for E2E to be successful.


End to End Encryption provides a high level of information integrity and security by maintaining encryption on transmitted data from the origin of the data to the destination.  ForumPass encryption is invoked at the document library level to ensure files contained within that library are handled and maintained with the additional level of security encryption provides.


Click the arrows below to read further about the overall ForumPass OFFICIAL process, benefits, roles available to users, and the different ForumPass Profiles.

Workflow

Please select the image to enlarge:


Benefits

  • Secure, cloud-based application for internal and external partners to exchange information and collaborate on any type of content.
  • Microsoft Office SharePoint look and feel for easy and quick user adoption.
  • Designed specifically to be compliant with the 14 UK Cabinet Office Cloud Security Principles for hosting of OFFICIAL / OFFICIAL-SENSITIVE marked data.
  • Mandatory multi-factor authentication with a choice of industry standard (NIST 800-63 compliant) credential types, ensuring the identity of users.
  • Mandatory data encryption in transit and at rest ensures content is secured at all times.
  • Granular access controls ensure only the right people have access to the right data at the right time.
  • Multi-tenant application with data segregation between customers.
  • Dedicated market leading UK infrastructure and data storage aligned with ISO standards, procedures and controls.
  • Protection measures from insider and outside threats.
  • Part of the Exostar secure collaboration suite already in use by more than 500,000 people globally for over a decade.
  • Available to existing user communities within the Exostar ecosystem and new customers alike.
  • Fully supported service, including user onboarding, technical support, knowledge base and online training.
  • On demand, 24x7x365 high availability service with backup and disaster recovery backed by stringent Service Level Agreements (SLA).


Roles and Responsibilities

There are various roles, and capabilities within each role, to have access to ForumPass OFFICIAL.  ForumPass OFFICIAL is very permissions-based driven.  Please see the below sections for more information on each role's tasks to gain access:

Application Administrator: The designated application administrator for an organization is required to accept the ForumPass invitation and complete the registration process, as well as review the Exostar Terms and Conditions and accept the ForumPass Service Agreement, before any user can access the ForumPass application.  For more information on Application Administrative tasks, please go see the MAG Admin Resources page. 

Project/Site Owner: The Project/Site Owner must invite each user to the project site. Until this action is complete, users cannot see the project site listed under their Workspaces in the ForumPass application.  Each user receives an email from the site owner once permission is granted to the project site.  The Project/Site Owner can manage user's permissions directly in the ForumPass solution.

End User: End users are general users within ForumPass OFFICIAL, and can only access things a Site Administrator/Owner gives them permission to access.  Each user receives a user ID, one-time password, and system-generated password to establish their account by completing the First-Time Login process.  Once you purchase and download your Medium Level of Assurance Software certificates, and successfully access ForumPass, each user is required to accept the Export Control Notice to access the ForumPass environment.

Since the security level of the project site requires Federated Identity Service (FIS) Medium Level of Assurance (MLOA) Software certificates, you must complete a certificate purchase and in-person proofing.  The purchase process is explained on the Credentialing page, and the proofing process is explained on the MLOA In-Person Proofing page.  Work with your IT staff to obtain administrative rights to install the required ActiveX Controls. 


ForumPass Profiles

ForumPass supports five different access profiles for users: Core, Sensitive, Restricted, Protected, and Official.


Profile Type

Features

Required Authentication

Core
  • Document Management Capabilities, including:
    • Multiple file upload and download capability
    • Document Check out/Upload a New Version capability
    • Version Management
    • Fully configurable folder and file level permission assignment
    • Document approval routing
    • Document access reporting
  • Business Process Automation (workflows), including:
    • Customizable business workflow templates
    • Ability to route, track, and monitor tasks
    • Ability to re-route and escalate delayed tasks
    • Shared project calendar for project-wide visibility
  • Enhanced Features and Usability, including:
    • Personalized site views allowing users to aggregate tasks, documents, and other resources into a single site
    • Fully customizable access controls for projects, sites, and individual documents
    • Streamlined end-user enablement process.
  • Web Conferencing






User ID and Password

Sensitive

Same as Core, plus:

  • Certificate-based authentication
  • Enhanced capability to share information
  • Create and access both encrypted and non-encrypted document libraries


User ID, Password, and Basic Level of Assurance certificate

Restricted

Same as Core, plus:

  • Certificate-based authentication
  • Enhanced capability to share information
  • Ability to create and access only encrypted document libraries


User ID, Password, Medium Level of Assurance Hardware certificate


Restricted Attribute enabled in MAG, TLS 1.0 must be enabled in your browser and JAVA applet

Protected

Same as Core, plus:

  • Certificate-based authentication
  • Enhanced capability to share information
  • End-to-End Encryption access

User ID, Password, Medium Level of Assurance Software certificate


Restricted Attribute enabled in MAG, TLS 1.0 must be enabled in your browser and JAVA applet

Official

Same as Core, plus:

  • Certificate-based authentication
  • Enhanced capability to share information
  • Enforces End-to-End Encryption
  • Ability to create and access only encrypted document libraries


User ID, Password, Medium Level of Assurance Software certificate


Restricted Attribute enabled in MAG, TLS 1.0 must be enabled in your browser and JAVA applet


How useful was this content?

Your Rating: Results: 1 Star 2 Star 3 Star 4 Star 5 Star 15 rates

News and Announcements

  • Stay tuned...