{"id":19688,"date":"2026-11-03T11:29:29","date_gmt":"2026-11-03T16:29:29","guid":{"rendered":"https:\/\/www.iri.com\/blog\/?p=19688"},"modified":"2026-11-03T13:05:46","modified_gmt":"2026-11-03T18:05:46","slug":"securing-iri-jobs-with-the-ogs-pfm","status":"publish","type":"post","link":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/","title":{"rendered":"Securing IRI Jobs with the OGS PFM"},"content":{"rendered":"<p data-pm-slice=\"1 1 []\">With the release of CoSort Version 11, IRI introduced the <a href=\"https:\/\/www.iri.com\/blog\/iri\/business\/introducing-the-iri-ops-governance-system-ogs\/\"><strong>Ops Governance System (OGS)<\/strong><\/a>, a framework that provides runtime access control, audit logging, and optional tamper detection for SortCL-compatible jobs.<\/p>\n<p>At the center of OGS is the <a href=\"https:\/\/www.iri.com\/blog\/iri\/business\/iri-ogs-policy-file-runtime-governance\/\"><strong>Policy File<\/strong><\/a>, an encrypted JSON document that defines users, groups, roles, permissions, audit rules, and other governance settings. Because this file controls how operational governance rules are applied, it is important to understand how to create, maintain, and modify it securely.<\/p>\n<p data-pm-slice=\"1 1 []\">The <strong>Policy File Manager (PFM)<\/strong> provides this functionality through a command-line, menu-driven interface. The utility is included with every OGS-enabled installation of <a href=\"https:\/\/www.iri.com\/products\/cosort\">CoSort<\/a>, <a href=\"https:\/\/www.iri.com\/products\/fieldshield\">FieldShield<\/a>, <a href=\"https:\/\/www.iri.com\/products\/nextform\">NextForm<\/a>, <a href=\"https:\/\/www.iri.com\/products\/rowgen\">RowGen<\/a>, and <a href=\"https:\/\/www.iri.com\/products\/voracity\">Voracity<\/a>.<\/p>\n<p data-pm-slice=\"1 1 []\">PFM supports several essential governance activities, including creating global Policy Files and job-specific sub-policy files, viewing and modifying existing policies, querying governance settings, and logging policy changes.<\/p>\n<p data-pm-slice=\"1 1 []\">This article explains the purpose, benefits, and general operation of the PFM utility, including its four operating modes and how it supports secure governance configuration.<\/p>\n<h2><b>What the PFM Utility Is<\/b><\/h2>\n<p data-pm-slice=\"1 1 []\">The IRI documentation describes the Policy File Manager as a command-line, menu-driven program used to create, modify, and view SortCL operational governance rules.<\/p>\n<p>The utility is located in the following directories:<\/p>\n<ul>\n<li data-pm-slice=\"1 1 []\"><strong><strong>Linux: <\/strong><\/strong><code class=\"language-text\">$COSORT_HOME\/bin\/policy_file_manager<\/code><\/li>\n<li><strong>Windows: <\/strong><code class=\"language-text\">%COSORT_HOME%\\bin\\policy_file_manager.exe<\/code><\/li>\n<\/ul>\n<p>PFM is the only supported method for creating or modifying OGS Policy Files. This is because the files follow a strict JSON schema and are subsequently encrypted.\u00a0Rather than editing the encrypted Policy File directly, authorized users work through the PFM interface to maintain the required structure and configuration.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Why the PFM Utility Matters<\/h2>\n<p>PFM provides a centralized way to manage the governance rules that control SortCL-compatible jobs. Its primary benefits include secure policy management, centralized configuration, change tracking, and support for both global and job-specific governance.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-19695 aligncenter\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview-1024x524.png\" alt=\"Infographic highlighting four benefits of the IRI Policy File Manager (PFM): securing encrypted governance files, centralizing governance rules, recording policy modifications, and supporting global and job-specific governance.\" width=\"516\" height=\"264\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview-1024x524.png 1024w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview-300x154.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview-768x393.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview-1536x786.png 1536w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Utility-Governance-Overview.png 1110w\" sizes=\"(max-width: 516px) 100vw, 516px\" \/><\/p>\n<h3 data-pm-slice=\"1 1 []\">1. Secures and Manages Encrypted Governance Files<\/h3>\n<p>PFM provides the supported interface for creating, querying, displaying, and modifying encrypted Policy Files.\u00a0Restricting access to policy modifications helps protect the <strong>Role-Based Access Controls (RBACs)<\/strong> defined in the Policy File. These controls determine which users, groups, and roles have access to governed resources and operations.<\/p>\n<p>In addition, policy encryption and restricted modification access support zero-trust security objectives by helping protect governance rules against unauthorized changes.\u00a0Together, these mechanisms help maintain the integrity of the operational rules defined through OGS.<\/p>\n<h3 data-pm-slice=\"1 1 []\">2. Centralizes Management of Operational Governance Rules<\/h3>\n<p>PFM brings several governance configuration functions into a single interface.<br \/>\nAdministrators can manage:<\/p>\n<ul>\n<li>Users, groups, and roles<\/li>\n<li>Form permissions, including FILES, FIELDS, TABLES, URLS, FUNCTIONS, and other governed forms<\/li>\n<li>Audit logging settings<\/li>\n<li>Script signature requirements<\/li>\n<li>Log retention policies<\/li>\n<li>Sub-policy file creation<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">By managing these settings through PFM, designated governors can maintain operational governance rules without directly modifying encrypted policy content.\u00a0This centralized approach also helps maintain consistency when configuring access permissions, audit requirements, and other controls.<\/p>\n<h3 data-pm-slice=\"1 1 []\">3. Automatically Records Policy Modifications<\/h3>\n<p data-pm-slice=\"1 1 []\">PFM automatically records modifications made to the Policy File, providing a change history that supports traceability and governance reviews.<\/p>\n<p data-pm-slice=\"1 1 []\">These records are written to:\u00a0<code class=\"language-text\">policy_changes.txt<br \/>\n<\/code>The file is located in:<\/p>\n<ul>\n<li><strong>Linux: <\/strong><code class=\"language-text\">$COSORT_HOME\/etc<\/code><\/li>\n<li><strong>Windows: <\/strong><code class=\"language-text\">%COSORT_HOME%\\etc<\/code><\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">The following excerpt illustrates the types of changes recorded in the file:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-text\">Date-Time           Log-In Source Form-Instance Action Reason\r\n2026-06-11T15:20:41  susan PFM User - bmead Add\r\n2026-06-11T15:22:45  susan PFM Group - Legal Add\r\n2026-06-12T18:43:09  susan PFM Script - aggregate2.scl Delete\r\n2026-07-22T20:34:35  susan PFM field - POLICY_NB Add\r\n2026-07-30T14:29:00  susan PFM FIELDS - POLICY_NB Added reader 'bmead' to 'POLICY_NB'<\/code><\/pre>\n<p data-pm-slice=\"1 1 []\">In this example, each entry identifies <code dir=\"ltr\">susan<\/code> as the logged-in user. This user has governor permission.<\/p>\n<p data-pm-slice=\"1 1 []\">The records illustrate changes involving users, groups, scripts, and field permissions. By recording policy modifications, PFM provides information that can be reviewed during audits, compliance assessments, and investigations of configuration changes.<\/p>\n<p>To learn how PFM configures audit logging for SortCL job execution, read <a href=\"https:\/\/www.iri.com\/blog\/iri\/business\/ogs-audit-logs-sortcl-jobs\/\">OGS Audit Logs to Govern SortCL Jobs<\/a>.<\/p>\n<h3 data-pm-slice=\"1 1 []\">4. Supports Both Global and Job-Specific Governance<\/h3>\n<p>PFM can create and manage two types of governance files:<\/p>\n<ul>\n<li><strong>Global Policy Files:<\/strong> Application-independent files containing the main governance configuration.<\/li>\n<li><strong>Sub-policy files:<\/strong> Files that provide job-specific overrides to the main Policy File.<\/li>\n<\/ul>\n<p>This distinction allows organizations to establish central governance settings while accommodating access requirements or other policy details associated with individual SortCL jobs.\u00a0Sub-policy behavior, including its effect on the global Policy File&#8217;s FORMS section, is explained later in this article.<\/p>\n<h2 data-pm-slice=\"1 1 []\">The Four Operating Modes of PFM<\/h2>\n<p>When launched, PFM presents four primary operating modes:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-text\">1) Create a new Policy file or Sub-policy file\r\n2) Modify an existing Policy file\r\n3) View an existing Policy file\r\n4) Query an existing Policy file<\/code><\/pre>\n<p>Each mode supports a different activity in the policy management lifecycle.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-19694\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Operating-Modes-Infographic-1-1024x768.png\" alt=\"Diagram showing the four IRI Policy File Manager (PFM) operating modes: Create, Modify, View, and Query, connected to an encrypted OGS Policy File.\" width=\"478\" height=\"358\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Operating-Modes-Infographic-1-1024x768.png 1024w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Operating-Modes-Infographic-1-300x225.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Operating-Modes-Infographic-1-768x576.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/PFM-Operating-Modes-Infographic-1.png 1110w\" sizes=\"(max-width: 478px) 100vw, 478px\" \/><\/p>\n<p>The following sections explain how these modes are used to create, maintain, inspect, and query governance configurations.<\/p>\n<h3 data-pm-slice=\"1 1 []\">1. Creating a New Policy or Sub-Policy File<\/h3>\n<p>The first operating mode allows a governor to create either:<\/p>\n<ul>\n<li>A new global Policy File<\/li>\n<li>A new sub-policy file associated with a specific SortCL job<\/li>\n<\/ul>\n<p>When a new Policy File is created, PFM generates a base or skeleton policy configuration.\u00a0The skeleton Policy File initially contains:<\/p>\n<ul>\n<li>No users<\/li>\n<li>No groups<\/li>\n<li>No roles<\/li>\n<li>No governed forms<\/li>\n<\/ul>\n<p>Consequently, the new Policy File is intentionally permissive until its governance rules are configured.<\/p>\n<p>A designated <strong>Data Governor<\/strong> should perform this initial configuration and establish the necessary access permissions and other governance settings before the policy is used to govern production jobs.\u00a0The distinction is important because creating a Policy File alone does not establish restrictive access controls.<\/p>\n<h3 data-pm-slice=\"1 1 []\">2. Modifying an Existing Policy File<\/h3>\n<p data-pm-slice=\"1 3 []\">The second operating mode supports changes to existing governance configurations.<br \/>\nPFM allows a governor to modify:<\/p>\n<ul>\n<li>The current active Policy File<\/li>\n<li>Archived Policy Files<\/li>\n<li>Existing sub-policy files<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">The modification menu includes:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-text\">(1) Modify current Policy file\r\n(2) Modify an archived Policy file\r\n(3) Modify an existing Subpolicy file<\/code><\/pre>\n<p data-pm-slice=\"1 1 []\">After selecting the appropriate file, the governor can add or edit governance elements, including:<\/p>\n<ul>\n<li>Users<\/li>\n<li>Groups<\/li>\n<li>Roles<\/li>\n<li>Form permissions<\/li>\n<li>Audit items<\/li>\n<li>Signature requirements<\/li>\n<li>Log retention rules<\/li>\n<\/ul>\n<p>These changes are made through the PFM interface, which maintains the required policy structure.<\/p>\n<p data-pm-slice=\"1 1 []\">Every modification is automatically recorded in the <code dir=\"ltr\">policy_changes.txt<\/code> file. As a result, policy administrators can review the history of configuration changes alongside the current governance settings.<\/p>\n<h3>3. Viewing a Policy File<\/h3>\n<p>The third operating mode allows PFM to decrypt and display existing governance files.<br \/>\nThe files available for viewing include:<\/p>\n<ul>\n<li>The current Policy File<\/li>\n<li>Archived versions of the Policy File<\/li>\n<li>Sub-policy files<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">Viewing existing policies is useful when reviewing governance configurations, investigating permission-related issues, or comparing the contents of different policy versions.<\/p>\n<p>For example, a governor can examine the rules defined in a Policy File to better understand the configuration associated with a particular governed environment.\u00a0This mode provides visibility into existing settings without requiring administrators to edit the encrypted policy content directly.<\/p>\n<h3 data-pm-slice=\"1 1 []\">4. Querying a Policy File<\/h3>\n<p>One of the PFM\u2019s most useful features is its Query mode, which allows administrators to treat security policies as queryable data.<\/p>\n<p>This mode provides immediate visibility into configured access controls, permissions, and governance settings within the Policy File. As a result, governors can quickly investigate user access, roles, and policy configurations without manually reviewing the entire file.<\/p>\n<p>For example, governors can ask questions such as:<\/p>\n<ul>\n<li>Which forms a particular user can read or write<\/li>\n<li>Which users belong to a specific group<\/li>\n<li>Which roles are assigned to a user<\/li>\n<li>Which audit mode is currently active<\/li>\n<li>Which forms are defined in the policy<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">The Query mode provides the following menu options:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-text\">(1) List roles\r\n(2) List groups\r\n(3) List users\r\n(4) List forms\r\n(5) List groups a particular user is in\r\n(6) Investigate a group\r\n(7) Investigate a role\r\n(8) Investigate a user\r\n(9) View policy history details\r\n(10) List audit mode\r\n(11) List audit items\r\n(12) List audit categories\r\n(13) View policy preferences\r\n(14) Query Policy file<\/code><\/pre>\n<p data-pm-slice=\"1 1 []\">These options provide direct access to information about the policy&#8217;s users, groups, roles, governed forms, audit configurations, and preferences.\u00a0For example, a governor investigating a permission issue can query the relevant user, examine group membership, and review associated roles.<\/p>\n<p data-pm-slice=\"1 1 []\">Similarly, the audit-related queries help administrators inspect configured audit settings without manually searching through the complete Policy File.\u00a0Therefore, PFM serves not only as a configuration utility but also as a tool for examining and understanding existing operational governance relationships.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Adding Items to a Policy File<\/h2>\n<p>When modifying a Policy File, PFM provides a structured menu for adding new governance elements.<br \/>\nThe available options include:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-text\">(1) User\r\n(2) Group\r\n(3) Role\r\n(4) Data Form\r\n(5) Audit Item\r\n(6) Subcontrol File\r\n(7) Policy Preference\r\n(8) Log Retention Policy<\/code><\/pre>\n<p>These options allow a governor to define the users, permissions, auditing requirements, and other configuration elements needed by the operational governance system.<\/p>\n<p data-pm-slice=\"1 1 []\">The structured interface helps ensure that new items follow the expected policy schema and are stored in the encrypted Policy File.\u00a0This approach also keeps governance configuration activities within the supported PFM workflow.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Sub-Policy Files: Application-Specific Overrides<\/h2>\n<p>In addition to global governance files, PFM supports the creation of sub-policy files associated with individual SortCL jobs.\u00a0A sub-policy file overrides the <strong>FORMS section<\/strong> of the main Policy File for a specific job.<\/p>\n<p data-pm-slice=\"1 1 []\">This behavior is important because sub-policy files do not simply append additional form definitions to the global configuration. Instead, they provide job-specific replacement definitions for that section.<\/p>\n<p>Sub-policy files can support use cases such as:<\/p>\n<ul>\n<li>Allowing additional users to access specific fields for a particular job<\/li>\n<li>Defining job-specific audit log content<\/li>\n<li>Cataloging large or complex job scripts separately<\/li>\n<\/ul>\n<p>The files follow this naming convention:<\/p>\n<p data-pm-slice=\"1 1 []\"><code class=\"language-text\">&lt;jobname&gt;.scl.ctl<\/code><\/p>\n<p data-pm-slice=\"1 1 []\">They are stored in the same directory as the global Policy File.<\/p>\n<p>By separating job-specific form configurations from the main policy, administrators can manage specialized governance requirements while retaining a central global Policy File.<\/p>\n<p>However, governors should review the complete FORMS override behavior when configuring sub-policy files to ensure that the resulting permissions are appropriate for the job.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Example: Adding a User and Granting Permissions<\/h2>\n<p data-pm-slice=\"1 1 []\">The following example illustrates the policy structure associated with a user and field-level permissions.<\/p>\n<p>PFM manages this information through its structured configuration interface and stores it in the encrypted Policy File.\u00a0The simplified excerpt below shows a USERS section and a FORMS section containing field permission definitions:<\/p>\n<pre data-pm-slice=\"1 1 []\"><code class=\"language-json\">\"USERS\": [\r\n    {\r\n        \"NAME\": \"alyssaa\",\r\n        \"Full Name\": \"Alyssa Arthur\",\r\n        \"Email\": \"alyssaa@sshotco.com\"\r\n    }\r\n],\r\n\r\n\"FORMS\": {\r\n    \"FIELDS\": {\r\n        \"INSTANCES\": [\r\n            {\r\n                \"NAME\": \"rank\",\r\n                \"READERS\": [\"Executive\"],\r\n                \"WRITERS\": [\"Executive\"],\r\n                \"Comment\": \"Executive Role can access. This gives the ranking of sales people.\"\r\n            }\r\n        ]\r\n    }\r\n}<\/code><\/pre>\n<p data-pm-slice=\"1 1 []\">In this example, the USERS section identifies a user named <code dir=\"ltr\">alyssaa<\/code>, while the FORMS section defines permissions for a field named <code dir=\"ltr\">rank<\/code>.\u00a0The <code dir=\"ltr\">READERS<\/code> and <code dir=\"ltr\">WRITERS<\/code> entries specify the <code dir=\"ltr\">Executive<\/code> role for the field. The accompanying comment describes the field as containing salesperson ranking information.<\/p>\n<p data-pm-slice=\"1 1 []\">This example demonstrates how user information and field permissions are represented within the policy structure.\u00a0PFM maintains the required policy schema, encrypts the resulting Policy File, and records modifications through its change logging mechanism.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Conclusion<\/h2>\n<p>The <strong>Policy File Manager (PFM)<\/strong> is a central configuration utility within the IRI Ops Governance System. It provides a structured, menu-driven interface for creating, maintaining, and examining encrypted governance files used by SortCL-compatible jobs.<\/p>\n<p>Through PFM, designated governors can:<\/p>\n<ul>\n<li><span style=\"font-weight: 400;\">Create and maintain governance rules<\/span><\/li>\n<li><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Define <\/span><\/span>role-based access permissions<\/li>\n<li><span style=\"font-weight: 400;\">Configure audit logging<\/span><\/li>\n<li>Manage script signature requirements<\/li>\n<li>Establish log retention policies<\/li>\n<li><span style=\"font-weight: 400;\">Create job\u2011specific sub\u2011policy files<\/span><\/li>\n<li data-pm-slice=\"1 1 [&quot;list&quot;,{&quot;spread&quot;:false,&quot;start&quot;:14530,&quot;end&quot;:14810},&quot;regular_list_item&quot;,{&quot;start&quot;:14747,&quot;end&quot;:14810}]\">Query users, roles, permissions, and governance relationships<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">PFM also records policy modifications, providing traceability for configuration changes and supporting operational governance reviews.<\/p>\n<p>By centralizing these activities, the utility helps administrators maintain consistent governance configurations and apply the access controls and audit requirements defined through OGS. You can\u00a0begin by designating a <strong>Data Governor<\/strong> to oversee the initial Policy File configuration and ongoing governance maintenance.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Frequently Asked Questions<\/h2>\n<h3>What is the IRI Policy File Manager (PFM)?<\/h3>\n<p>The Policy File Manager is a command-line, menu-driven utility used to create, modify, view, and query encrypted governance Policy Files within the IRI Ops Governance System. It provides the supported interface for managing SortCL operational governance rules.<\/p>\n<h3>What are the four operating modes of PFM?<\/h3>\n<p>PFM provides four operating modes: Create, Modify, View, and Query. These allow governors to create new policies, update existing configurations, inspect encrypted Policy Files, and query governance settings.<\/p>\n<h3>Does a new OGS Policy File automatically enforce access restrictions?<\/h3>\n<p>No. A newly created Policy File begins with a permissive skeleton configuration containing no users, groups, roles, or governed forms. A designated Data Governor must configure the appropriate governance rules.<\/p>\n<h3>What is the difference between a global Policy File and a sub-policy file?<\/h3>\n<p>A global Policy File provides application-independent governance settings. A sub-policy file provides job-specific overrides and replaces the FORMS section of the main Policy File for the associated SortCL job.<\/p>\n<h3>How does PFM track changes to governance policies?<\/h3>\n<p>PFM automatically records modifications in the <code dir=\"ltr\">policy_changes.txt<\/code> file located in the CoSort <code dir=\"ltr\">etc<\/code> directory. The records provide information about policy changes for governance reviews, troubleshooting, and audits.<\/p>\n<h2>Learn More About IRI Ops Governance<\/h2>\n<p>Want to learn how IRI&#8217;s Ops Governance System can help manage access controls, audit logging, and policy enforcement for SortCL-compatible jobs?\u00a0<a href=\"https:\/\/www.iri.com\/company\/contact\">Contact IRI<\/a> to learn more about OGS and its Policy File Manager utility.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>With the release of CoSort Version 11, IRI introduced the Ops Governance System (OGS), a framework that provides runtime access control, audit logging, and optional tamper detection for SortCL-compatible jobs. At the center of OGS is the Policy File, an encrypted JSON document that defines users, groups, roles, permissions, audit rules, and other governance settings.<\/p>\n<div><a class=\"btn-filled btn\" href=\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\" title=\"Securing IRI Jobs with the OGS PFM\">Read More<\/a><\/div>\n","protected":false},"author":10,"featured_media":19697,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[34],"tags":[2426,44,340,2476,850,2508,2455,2509,2397,2421,68],"class_list":["post-19688","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","tag-audit-logging","tag-cosort","tag-data-governance","tag-iri-ogs","tag-iri-workbench","tag-pfm","tag-policy-file-manager","tag-policy-management","tag-rbac","tag-role-based-access-control","tag-sortcl"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>IRI Policy File Manager (PFM) for OGS Governance<\/title>\n<meta name=\"description\" content=\"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Securing IRI Jobs with the OGS PFM\" \/>\n<meta property=\"og:description\" content=\"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\" \/>\n<meta property=\"og:site_name\" content=\"IRI\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-03T16:29:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-03T18:05:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1110\" \/>\n\t<meta property=\"og:image:height\" content=\"532\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Susan Gegner\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Susan Gegner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\"},\"author\":{\"name\":\"Susan Gegner\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/87be5da567628ab9396ca81170f36d63\"},\"headline\":\"Securing IRI Jobs with the OGS PFM\",\"datePublished\":\"2026-11-03T16:29:29+00:00\",\"dateModified\":\"2026-11-03T18:05:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\"},\"wordCount\":1939,\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png\",\"keywords\":[\"Audit Logging\",\"CoSort\",\"data governance\",\"IRI OGS\",\"IRI Workbench\",\"PFM\",\"Policy File Manager\",\"Policy Management\",\"RBAC\",\"Role-Based Access Control\",\"SortCL\"],\"articleSection\":[\"IRI Business\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\",\"url\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\",\"name\":\"IRI Policy File Manager (PFM) for OGS Governance\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png\",\"datePublished\":\"2026-11-03T16:29:29+00:00\",\"dateModified\":\"2026-11-03T18:05:46+00:00\",\"description\":\"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png\",\"width\":1110,\"height\":532,\"caption\":\"Featured image illustrating IRI SortCL jobs managed through the OGS Policy File Manager (PFM), showing Create, Modify, View, and Query functions connected to an encrypted OGS Policy File.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.iri.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Securing IRI Jobs with the OGS PFM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.iri.com\/blog\/#website\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"name\":\"IRI\",\"description\":\"Total Data Management Blog\",\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.iri.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\",\"name\":\"IRI\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"width\":750,\"height\":206,\"caption\":\"IRI\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/87be5da567628ab9396ca81170f36d63\",\"name\":\"Susan Gegner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2b1ca5592a65d44483351292cf1ae00a?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2b1ca5592a65d44483351292cf1ae00a?s=96&d=blank&r=g\",\"caption\":\"Susan Gegner\"},\"url\":\"https:\/\/www.iri.com\/blog\/author\/susang\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IRI Policy File Manager (PFM) for OGS Governance","description":"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/","og_locale":"en_US","og_type":"article","og_title":"Securing IRI Jobs with the OGS PFM","og_description":"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.","og_url":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/","og_site_name":"IRI","article_published_time":"2026-11-03T16:29:29+00:00","article_modified_time":"2026-11-03T18:05:46+00:00","og_image":[{"width":1110,"height":532,"url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","type":"image\/png"}],"author":"Susan Gegner","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Susan Gegner","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#article","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/"},"author":{"name":"Susan Gegner","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/87be5da567628ab9396ca81170f36d63"},"headline":"Securing IRI Jobs with the OGS PFM","datePublished":"2026-11-03T16:29:29+00:00","dateModified":"2026-11-03T18:05:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/"},"wordCount":1939,"publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","keywords":["Audit Logging","CoSort","data governance","IRI OGS","IRI Workbench","PFM","Policy File Manager","Policy Management","RBAC","Role-Based Access Control","SortCL"],"articleSection":["IRI Business"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/","url":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/","name":"IRI Policy File Manager (PFM) for OGS Governance","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage"},"image":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","datePublished":"2026-11-03T16:29:29+00:00","dateModified":"2026-11-03T18:05:46+00:00","description":"Understand how the IRI Policy File Manager (PFM) creates, modifies, and queries encrypted OGS policies to manage access controls, audit logs, and permissions.","breadcrumb":{"@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#primaryimage","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","width":1110,"height":532,"caption":"Featured image illustrating IRI SortCL jobs managed through the OGS Policy File Manager (PFM), showing Create, Modify, View, and Query functions connected to an encrypted OGS Policy File."},{"@type":"BreadcrumbList","@id":"https:\/\/www.iri.com\/blog\/iri\/business\/securing-iri-jobs-with-the-ogs-pfm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.iri.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Securing IRI Jobs with the OGS PFM"}]},{"@type":"WebSite","@id":"https:\/\/www.iri.com\/blog\/#website","url":"https:\/\/www.iri.com\/blog\/","name":"IRI","description":"Total Data Management Blog","publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.iri.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.iri.com\/blog\/#organization","name":"IRI","url":"https:\/\/www.iri.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","width":750,"height":206,"caption":"IRI"},"image":{"@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/87be5da567628ab9396ca81170f36d63","name":"Susan Gegner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2b1ca5592a65d44483351292cf1ae00a?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b1ca5592a65d44483351292cf1ae00a?s=96&d=blank&r=g","caption":"Susan Gegner"},"url":"https:\/\/www.iri.com\/blog\/author\/susang\/"}]}},"jetpack_featured_media_url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2026\/11\/Featured-image-Securing-IRI-Jobs-with-the-OGS-PFM.png","_links":{"self":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/19688"}],"collection":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/comments?post=19688"}],"version-history":[{"count":10,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/19688\/revisions"}],"predecessor-version":[{"id":19701,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/19688\/revisions\/19701"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media\/19697"}],"wp:attachment":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media?parent=19688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/categories?post=19688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/tags?post=19688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}