Network World
Saturday, September 6, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Community: Security

Navigation

But the eDiscovery Costs!

As a records manager, I have no problem with keeping email with valuable content as long as it is useful, but way keep a decade plus of all that other "stuff" that has no value? When litigation comes (and it will come) someone will have to sort through all of it when and search tools are only of limited use. Besides, while storage itself may be "cheap" (debatable), the cost of supporting that storage is not. At 25+ terabytes and counting, I know that many of my legal department colleagues and I are looking forward to some serious deletion.

Click to read the article this is in response to.

But the eDiscovery Costs!

0

As a records manager, I have no problem with keeping email with valuable content as long as it is useful, but way keep a decade plus of all that other "stuff" that has no value? When litigation comes (and it will come) someone will have to sort through all of it when and search tools are only of limited use. Besides, while storage itself may be "cheap" (debatable), the cost of supporting that storage is not. At 25+ terabytes and counting, I know that many of my legal department colleagues and I are looking forward to some serious deletion.

eDiscovery costs

0

There are really three issues here: 1) policies need to be created to determine what needs to be kept and what can safely be deleted, 2) good spam filtering tools need to be implemented to make sure that spam doesn't get archived, and 3) good archiving tools need to be deployed to make sure that your data gets stored properly and can be accessed.

Many companies have found that their archiving solutions either were not scalable enough to index all of the data they need to preserve and/or that searches take too long. That's why it's important to spec a system properly based on anticipated long term storage requirements and to make sure that the search capabilities won't result in superfluous data being produced.

Also, most data does not need to be kept for a decade or longer. Some content can safely be deleted after much shorter periods, although legal counsel (and regulators in some cases) will be able to advise on retention periods for specific data types.

Messages other than eMail?

0

Could you please comment on things like Voice Mail and Fax? In many systems these are now attachments to eMails....or are purposely kept separate "so we don't need to retain them". Doesn't the Federal Rules for Civil Procedures treatment of ESI make that "keep it separate" thinking dangerous for all the same reasons you've discussed here in regards to eMail? I'd love to see you address this topic at some point! Thx

All ESI must be retained

0

You're exactly right. Any electronicallly stored information -- voicemails and faxes included -- should be retained for discovery purposes. While a judge could rule that voicemails, for example, don't need to be included as part of a discovery order, he or she could rule that if they're stored electronically they are subject to review.

Best Practices

0

There is no valid reason to keep ESI longer than necessary for a) business purposes and b) legal or regulatory requirements. Implementing an automatic delete policy (60 days to 365 days) is a sound business practice. Email is a communication tool--not a business records repository in most businesses.

In addition to the cost of storage and archiving software (read the blog as an advertisement) you must consider that if litigation occurs someone (read lawyers as several hundred $$ per hour) are going to have to sift through all of that email to determine whether it is relevant to the lawsuit (or worse, the DOJ investigation).

All of those emails and IMs that would have been telephone calls in the past ("Want to go to lunch, now." "Sorry, can't make it yet." Etc.) are clogging up your servers and costing you dearly when the eventual lawsuit gets filed.

It's about content...

0

To minimize an organization's risk in retaining email (and any other records, paper or electronic), organizations should manage all records based on the content of the record. Records retention policies should be created based on this record content, and followed consistently regardless of the media format. When a record has reached the end of its life cycle, that record should be destroyed in the normal course of business. Courts look favorably on organizations that manage their records based on this content approach, versus managing records haphazardly, based on which media format it happens to be stored in.

Keeping email for very short time periods or very long term periods is not the answer. The question that needs to be asked is what is the value (legal, regulatory, business need) of the records content, and then manage accordingly.

Electronic records management systems (ERMS) are available to help organizations manage the retention of their records using this content approach. There is also a national (ANSI) standard and technical report dedicated to this subject: "Requirements for Managing Electronic Messages as Records" (ANSI/ARMA 9-2004) and "Procedures and Issues in Managing Electronic Messages as Records" (ANSI/ARMA TR-02-2007).

Kevin Joerling, CRM

Sr. Manager, Standards & Records Management

www.arma.org

Improving e-records

0

As businesses create ever-growing mountains of electronic records, lawsuits fight over the records in e-discovery and record retention disputes. Knowing that litigation is inevitable, businesses can use technology proactively to render the records potentially more benign. --Ben http://hack-igations.blogspot.com/2008/05/nix-smoking-gun-e-discovery.html

shesanice

0

i'd like to retrieve if possible old e-mail from this subject pls

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Latest security headlines from Network World:

Browser war redux, patch time, iPod news

Libertarian Barr, EPIC outline privacy agenda

Microsoft to release four critical patches

'It's the data, stupid' so you'd better vote to protect it

SSDs are hot, but not without security risks

  1   2   3   4   5   6   7   8   9  10  next 

Advertisement: