Kiteworks has announced a partnership with data risk management advisory, consulting and managed services firm Infolock to help organizations assess data risks, enforce governance policies and manage their Kiteworks environments.

Through the partnership, Infolock will provide advisory, implementation and ongoing managed services for the Kiteworks platform, extending its proprietary DataRAMP framework to private data control and governance.

Infolock’s DataRAMP framework assesses an organization’s data risk maturity and establishes a strategy for managing risk as regulations change. The company also uses data security posture management (DSPM) technology to scan an organization’s data assets, identifying where information is located, who can access it and how sensitive it is.

Kiteworks’ Data Policy Engine then enforces role- and attribute-based policies governing how data is sent, shared, received and used across email, file sharing and collaboration, SFTP, managed file transfer, APIs and data forms.

These policies operate through the Kiteworks control plane, with policy actions recorded in a unified audit log. Policy conditions include data tags, user attributes and the specific actions users attempt to perform.

“Our DataRAMP assessment identifies where a client’s data risk is and what the strategy should be,” said Mike Skidmore, director of business development strategy at Infolock. “Kiteworks provides the control plane that enforces policy on that data, and Infolock’s advisory and managed services cover implementation and operation.”

Infolock will also provide a managed service for customers using the Kiteworks platform. The service follows the operational model the company currently uses for clients’ data loss prevention and data security posture programs.

Customers will receive dedicated resources, including an operations analyst, customer success manager and solutions architect. Services will include architecture reviews, incident triage, technical administration and key performance indicator (KPI) development and tracking. Infolock will administer customers’ Kiteworks environments on their behalf.

Infolock holds a SOC 2 Type 2 report, and its team members hold CISSP, CISA and CISM certifications.

Kiteworks’ Secure Gov Cloud is FedRAMP Class D Agency Auth In Process, while its Federal Cloud has held FedRAMP Class C Certification since 2017. The platform is also FIPS 140-3 validated (NIST CMVP Certificate #4980) and maps to compliance frameworks including HIPAA and GDPR. Kiteworks also holds PCI DSS certification.

“Our customers want proof that their data governance strategy is being enforced, not just documented,” said Matt Marlier, vice president of global channels and alliances at Kiteworks. “Together with Infolock, they get a single path from understanding their data risk to enforcing policy on it, with an expert team operating the environment and a complete audit trail behind every action. They can reduce risk and demonstrate compliance without adding to their own workload.”

Additional information about the partnership is available in the Kiteworks and Infolock Solution Brief.