Is storing a client's folder structure a security risk?

Question

At work, we generate sensitive report files for our clients. Currently, these files are stored in cloud storage. Some partners want the files on their local machine, instead, so we will need the directory in which they want to save the files. Would it be a security risk to save their directory structure in our database?

Why do you need their directory? Why not a shared folder (so `C:\Example\Folder\Folder\REPORTS` becomes `\\ClientPC\REPORTS` where the permissions are locked down)? Or a number of other file copying/distributing techniques? — armani, Apr 09 '15 at 15:23

score 1 · Accepted Answer · answered Apr 09 '15 at 16:24

1

This doesn't jump out at me as a security risk. Sensitive data is stored in databases all the time. If your database is somehow compromised, I suspect that client directory structures getting out would be pretty low on your list of concerns.

answered Apr 09 '15 at 16:24

Abe Miessler

8,155
10
44
72

Don't underestimate the power of reputational damage... – Lucas Kauffman Apr 10 '15 at 05:41
@LucasKauffman, I would argue that your database being compromised will do the reputational damage - not the fact that you stored directories in there. – Abe Miessler Apr 10 '15 at 14:30

Is storing a client's folder structure a security risk?

1 Answers1