Technology for confidentiality advising

A system for preventing unwanted information disclosure in an enterprise for which networked computer readable storage media has storage areas with respective classification levels, the system comprising:

• a processor;
• and
• a computer readable storage medium connected to the processor, wherein the computer readable storage medium has stored thereon a program for controlling the processor, and wherein the processor is operative with the program to execute the program for:
• generating, by a computer system, a communications exchange matrix from historical electronic communications;
• performing statistical analysis of the communications exchange matrix by a computer system, including statistical analysis of frequency of electronic communications between respective senders and receivers, existing access control rules, sender job function, receiver job function, levels of detail of respective electronic communications, lengths of time intervals during which communications occur between respective senders and receivers, and variations in levels of detail of respective electronic communications;
• generating an access control model by a computer system based on the statistical analysis of the communications exchange matrix;
• assigning, by a computer system applying the access control model, a risk score for indicating risk of unwanted disclosure of a current electronic communication from a sender to a receiver of the current electronic communication, wherein networked computer readable storage media of the enterprise has respective storage areas for the respective enterprise levels, each storage area having information belonging to the respective storage area's enterprise level, wherein at least one of the sender and the receiver have at least one access control level that indicates at least one of the enterprise levels of storage area information to which at least one of the sender and receiver has authorized access, wherein the model generates the risk score responsive to an identity of the sender and an identity of the receiver and responsive to the at least one access control level and responsive to the enterprise level of a position of at least one of the sender and receiver;
• and
• blocking automatically, by the computer system, transmission of the current electronic communication from the sender to the receiver responsive to whether the risk score for the sender and receiver exceeds a predetermined threshold unless manual input permitting the transmission is received by the computer system from at least the sender.

A computer program product for preventing unwanted information disclosure in an enterprise for which networked computer readable storage media has storage areas with respective classification levels, including a computer readable storage medium having instructions stored thereon for execution by a computer system, wherein the instructions, when executed by the computer system, cause the computer system to implement a method comprising:

• generating, by a computer system, a communications exchange matrix from historical electronic communications;
• performing statistical analysis of the communications exchange matrix by a computer system, including statistical analysis of frequency of electronic communications between respective senders and receivers, existing access control rules, sender job function, receiver job function, levels of detail of respective electronic communications, lengths of time intervals during which communications occur between respective senders and receivers, and variations in levels of detail of respective electronic communications;
• generating an access control model by a computer system based on the statistical analysis of the communications exchange matrix;
• assigning, by a computer system applying the access control model, a risk score for indicating risk of unwanted disclosure of a current electronic communication from a sender to a receiver of the current electronic communication, wherein networked computer readable storage media of the enterprise has respective storage areas for the respective enterprise levels, each storage area having information belonging to the respective storage area's enterprise level, wherein at least one of the sender and the receiver have at least one access control level that indicates at least one of the enterprise levels of storage area information to which at least one of the sender and receiver has authorized access, wherein the model generates the risk score responsive to an identity of the sender and an identity of the receiver and responsive to the at least one access control level and responsive to the enterprise level of a position of at least one of the sender and receiver;
• and
• blocking automatically, by the computer system, transmission of the current electronic communication from the sender to the receiver responsive to whether the risk score for the sender and receiver exceeds a predetermined threshold unless manual input permitting the transmission is received by the computer system from at least the sender.