Data security and device security are two different things… sometimes we treat them as the same thing.
When looking at document management… or any other content management for that matter, there are a few ways that we can keep our data secure.
For example. In a paper-based environment you might put your documents in a filing cabinet or on a shelf.
Your security is only as strong as the location you put them in. If you get too many documents to house, you might rent space at another facility and have them store the documents for you.If the documents are at your location, your building security keeps them safe. If they are off site, how do you know they are safe? How can you trust that your vendor will keep them as secure as you hope?
Electronic data security has the same concerns. Bruce Schneier has an essay on Separating Data Ownership and Device Ownership. I think that whether or not you choose to have a paper-based or electronic based document management system, you should surely understand the difference between the two.
