How to Keep Sensitive MS Excel Data Secure | Vena Solutions

In the business world, all data typically stored in a spreadsheet (Microsoft Excel, Google Sheets, etc.) is sensitive data. And for that reason, you should do whatever it takes to keep it secure at all times. There's never a good time to take a risk and that includes internal personnel who are working with and sharing spreadsheets consistently.

A quick online search will help you better understand why Excel security is so important. For example, this article outlines how hackers turn Excel's features against it.

The possibility that someone can hack your Excel files isn't meant to scare you, but rather it's a reminder of how important it is to secure your data.

There are three available options for securing Excel data:

• File level protection  
• Workbook level protection
• Worksheet level protection

These sound similar--and in some ways they are--but there are many differences that will help you decide which one is best. Let's look at your options within each category.

1. File Level Protection

This is the most common form of protection as it allows you to lock down your Excel file with the use of a password. Without a password, a user can't open or modify the spreadsheet. 

You have two options if you're interested in using an Excel file security password:

• Creating a password to open or modify a file: This option allows you to create a password that's used to open or modify a file. It's best for when you need to give others, such as co-workers or suppliers, edit or read-only access. 
  
  
• File encryption: This allows you to set a password and lock the file. This keeps others from opening it.

You can also do the following at the file level:

• Mark as final: You can use this to mark your file as the final version, which prohibits other users from altering it. 
  
  
• Digital signature: Microsoft states that a "signature confirms that the information originated from the signer and has not been altered." 
  
  
• Restrict access: This option works if your company uses Information Rights Management (IRM) to manage permissions. 

Vena offers a series of file level protection that goes beyond the basic Excel file security. Our EPM software uses best-of-breed technologies and stringent operational processes to ensure that customer data is safe at all times. Vena's security highlights include:

• A strong Secure Development Life-Cycle (SDLC)
  
  
• AES 256-bit encryption of customer data keys are managed using Amazon's Key Management System (KMS)
  
  
• Extensive internal vulnerability scanning and management, with annual independent penetration testing reports available to customers on demand
  
  
• SAML 2.0 Single Sign-On and IP whitelisting
  
  
• Customer data isolation
  
  
• Multi-factor authentication
  
  
• Secure data transfers--all data is transmitted over HTTPS using TLS1.2 encryption

Learn more about our security features here.

2. Workbook Level Protection

A big part of your workforce planning strategy is designed around helping employees and departments work in a frictionless environment.

When multiple people have access to an Excel workbook, you should consider locking the structure that you've created. This requires others to use a password to make changes.

For example, when you lock the workbook structure, other users no longer have the ability to add, delete or rename worksheets. This comes in handy particularly when you have multiple connected workbooks and you need to be sure that structure remains consistent across departments or teams.

Vena's Role Based Access Control allows you to set per-user permissions to all of your data. This system allows for fine-grained access control, enforcing segregation of duties within an organization to maintain compliance with internal and external data controls. Vena also provides a complete audit trail for all spreadsheet, document and budget versions. Users can view any version and roll-back to previous versions in just a few clicks. And each spreadsheet and document version is date, time and user stamped to improve accountability.

3. Worksheet Level Protection

If you want to control how users use worksheets, this form of Excel security is best. It allows you to specify what a user can and can't do, with the idea of keeping your data safe and as well as customizing the intended user experience.

For example, you may want to specifically prohibit users from using Sort and AutoFilter. They can still view the worksheet and do other things, but they're prohibited from these functions. To "softly" secure your data, you might combine hiding rows or columns and applying worksheet protection. This can be a convenient way to hide drivers and assumptions you may want to remain out of view.

Vena offers continuous data backups as part of our security enforcement. We perform full backups of your data every day so you can recover your data from any date (up to one year in the past). And our EPM tools offer the replication of backups into an entire separate region (where available), ensuring that your data is protected even in the worst case scenario.

Is One Type of Excel Security Protection Best?

There's no simple answer to this question. It depends on your organization, your role and what you're trying to accomplish. 

At Vena we prioritize the security and integrity of our customers' data. That's why our EPM software uses best-of-breed technologies and stringent operational processes to ensure that customer data is safe at all times.

Outside of our solution, the best thing you can do is master the ins and outs of each type of protection to keep your sensitive Excel files secure. That will help you use the right one at the right time.

Here is some general guidance that can help you get started:

• Use file level protection to control user access: For instance, if you have a budget Excel file that you don't want anyone outside of your department to see, you can keep it private with file level protection. By encrypting the file, a password is needed to open it. 
  
  
• Use workbook level protection to control how people use worksheets: It's common to have a workbook that houses multiple worksheets, such as if you're a sales manager who wants a separate sheet for each sales representative. This type of protection allows each rep to add data to their own worksheet without the ability to modify any others in the workbook. 
  
  
• Use worksheet level protection to control how people work with individual worksheets: Reformatting worksheets over and over again is time consuming. This level of protection allows you to control what users can and can't do. 

There's a good possibility that you'll use all three types of protections in a business setting. 

Furthermore, it's common to change protections, such as when you bring a new employee into your department or an employee is terminated. 

We're Keeping Security at the Forefront

At Vena, we understand that many organizations lean on Excel to store, track and measure data. While Excel is a powerful and secure tool in its own right, our enterprise level security takes it to the next level.

Our performance management software allows you to control data access and drill down into the history of a spreadsheet so you know who has been in your templates and where your numbers are coming from.

Rather than constantly worrying about Excel security, use this information to keep your data safe and secure at all times.