I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive Excel files from our clients through our web portal, we then review them and send them back via email. A problem came up where a file was emailed to the wrong client.
We have started using our website to transfer files back and forth since then, but the design and process by which documents are assigned to clients -so that only they can see the document on their login- is really not efficient. It is multiple steps and takes longer than it should to simply say "x should see y".
Anyway, the company I work for thinks that they're smarter than everyone else and no one really has any database, programming, IT, or security experience so they want to have these long drawn out conversations that are essentially reinventing the wheel. Reinventing the wheel in that there a common practices that companies utilize millions of times a day.
So this is the question. How are most companies sending their confidential information between themselves and clients?
I know with institutions I personally bank with or have credit cards through, it is all through their customer portal. They probably just have a more efficient way of assigning docs to clients than we have.