132 IBM Content Manager OnDemand Guide
6.1  Content Manager OnDemand security overview
The amount of security that is employed by an organization varies by organization and is 
normally proportional to the cost of data loss because of security leaks or other issues.
For any system, the first layer of security is its environment. Several attributes are included in 
a secure environment:
/SM590000Physical security: Controlling physical access to the system and ensuring that the system 
is protected from both natural and man-made disasters.
/SM590000Data security: Controlling access to online data by using both authentication and 
authorization techniques; controlling access to offline data, including all backup copies of 
the data, data storage sites, and encryption of the backup copies of data.
/SM590000Personnel security: Hiring trusted employees, limiting employee access based on 
employee role, and redundancy.
Although environmental security is beyond the scope of this book, it is important to be aware 
of and prepare for security in these areas.
This section describes what Content Manager OnDemand can provide from a security 
perspective. 
Content Manager OnDemand is a flexible and scalable system. This flexibility allows the 
deployment of multiple security features by using multiple methodologies. The descriptions 
within this chapter are examples of the available components and their usage to create a 
secure environment.
Figure 6-1 outlines many of the components that are part of Content Manager OnDemand’s 
security features. 
Figure 6-1   Content Manager OnDemand security overview
Web Users
We b Serve rs
Java API
Lib rary Server
GU I Use rs
Backup system
Object  Server
Offsite 
location
CMOD Server
Data Center
Sys tem tables
App lic ation Grou p d ata tab les
CMOD 
Com ma nd s St ac hfi l e
Logo n… Qu ery
External
Secur ity
Ret riev e
L istening  po rt
SSL po rt
CMOD Deve lopment Lab
CMOD data arch ive
backu ps