About
Subscribe

E-mail compliance - how to get it right

By: Barry Gill, Product Strategist, Mimecast South Africa

Johannesburg, 22 Oct 2008

The storage and retrieval of e-mails has become a big headache for most businesses, especially now that good governance and no fewer than five local acts prescribe the need to store all e-mail sent or received for up to 10 years.

The acts that demand effective storage of e-mail include the Electronic Communications and Transactions Act, the Regulation of Interception of Communications and Provision of Communications-Related Information Act (Interception Act), the Financial Advisory and Intermediary Services Act, the National Archives of South Africa Act, and the Companies Act.

In addition, The King II report, which guides South African companies on what constitutes good corporate governance, requires companies to identify and mitigate risk.

The challenges are vast and include the cost of storing millions of e-mails in a way that doesn`t erode the integrity of the mail, the infrastructure to retrieve and archive the e-mails and the people to manage it all. This isn`t just about a few servers down in the data room. It`s become about making sure that every e-mail is one search phrase away.

There are a few things that companies can do to get it right.

1. Remember, archiving is not a job for employees.
Automate as much as possible. Expecting users to take responsibility for archiving is just setting you and your staff up for failure and a mountain of written warnings.

2. Don`t change a thing
If the e-mail has been changed in any way its power as a piece of evidence is eroded. Using immutable storage together with encryption technology can ensure that a forensically sound copy can be sourced. This is vital in any legal situation where the only piece of evidence between your company and a hefty fine is one small e-mail.

3. Make sure it`s easily retrievable
Store the e-mail in a way that makes it easy to search for. We have heard horror stories from clients where it has taken seven straight days to locate one e-mail because it was all stored on tapes which required a person to physically go through data on each and every tape.

4. Tell people that it`s going on
Remember to inform your staff that every e-mail is going to be stored, archived and saved for 10 years. The communication has a few positive outcomes:

A. It should stop any fruity e-mails being sent and received
B. Users are confident to delete e-mails as they can search the store should they need them. This means smaller active mailboxes which means fewer IT issues

Correctly managing your company`s communication can only benefit the business and considering that up to 80% of an organisation`s fresh intellectual property can be found in its e-mails, it makes sense to make sure none of them get away.

Share