Stephen Foskett, Pack Rat

Answering Your Email Archiving Questions

Posted on 05. Sep, 2008 by Stephen in Enterprise storage

My webinar on building a business case for email archiving was very well-attended, so I was not able to get to everyone during the question and answer section. Since the questions were really excellent, I thought I would include them (and my responses) here.

• How to improve the receptivity of the e-mail archieve message to management to overcome the biases you mentioned? Consider what management is interested in most: They don’t necessarily care about email archiving, but they will respond to well-presented solutions to business objectives like cost avoidance for litigation and e-discovery or future reduced spending on IT infrastructure (storage).
• How do you get things moving when Legal is sponsor and can demonstrate that one lawsuit discovery failure will be the same cost as the project? This would be an ideal scenereo. Legal probably already understands the high cost of e-discovery and potential risk of adverse judgement. Now demonstrate the ways that email archiving can help. But be realistic – an email archiving app will help with e-discovery, but is definitely not a complete solution. You will still need policy and process for hold and discovery, and may even need additional e-discovery tools.
• Have you seen standard or default retention periods for email, and how are they determined? I would not want to suggest standard or “rule of thumb” retention periods. In my experience with many organizations, I have seen such a wide variety of carefully considered retention schedules that I have come to believe that there is no such thing as a standard. However, I would like to suggest not making a too-short maximum (say, less than three months) or else you will drive end users to underground archiving to get around the policy. Such a short retention period can work for certain classes of messages (company picnic, lunch invites, mass mailings), but I can’t imagine a business where no one would need to keep messages longer. Try to be realistic in setting your retention, balancing productivity with compliance. Setting retention periods is an exercise in consensus building, with representatives from IT, Legal, HR, Compliance, and others each contributing their own needs. It’s doable, though – I do it for a living!
• How many years back do people hold on to mail typically? Most organizations lack standards or policies for retention, so their typical retention varies based on employee actions. When they do have retention policies for email, they tend to classify messages (by organization or user, keywords, or through user action) into a few “buckets” with appropriate retention for each. Most have short retention (3 to 9 months) for some content, and longer retention (on the order of a few years) for other types. Most also have a “keep forever” category for special record types.
• Do you have an opinion on whether journaling is better or not for meeting legal requirements? Most legal groups desire the most complete set of messages possible. Both journaling and log shipping should meet this need.
• Have you seen much use for email archiving for supporting Audit to prove that an event was reviewed and approved? Many organizations use email as part of their workflow. In these cases, maintaining a complete set of messages is critical for audit and compliance. Many certainly do use email archives for this purpose, while others prefer to route such approvals to other content management systems to maintain these records.
• Is there a legal argument to be made that getting rid of pst files and having a central archive will help with privacy law issues? Decentralized personal archives like PST files are a privacy nightmare waiting to happen – they are highly mobile, can be copied and viewed easily, and tend to “live” on theft-prone devices like laptops and portable drives. Replacing PST files with a centralized archive has many many benefits, and the reduced risk of privacy breaches is certainly among these. However, most mail clients still maintain offline caches of mail server (and archive) data, so simply replacing PST with an archive will not elimate the privacy risk.
• You might want to mention that accelerating volumes of stored email are not necessarily bad because it is electronic and therefore searchable. Offline stuff dumped into file servers with no meta data is actually more of a nightmare because no one knows who created it or why it is needed (or not). Adding structure to electronic stored information is always valuable, and email archives certainly do make that data much more organized and searchable, along with enabling retention policies to be applied (assuming they exist!) Unstructured data on file servers is indeed a nightmare, and can pose a serious risk. There are other tools to tackle this type of data, however, and they might do a better job than relying on an email archive as a primary repository of critical records.
• Can you elaborate on user training needs? I was under the impression that changes to the end user were minimal. The amount of impact an email archiving system has on end users can vary from minimal to significant, based mostly on how much user interaction is desired for classification. However, even the most unobtrusive system is likely to change certain aspects of user behavior, from PST files to searches to stubbing and deletion of messages. Therefore, training is probably needed with every email archiving implementation.
• Litigation holds can last for YEARS !! Tape is DEAD especially to try to rebuild mail boxes. Tape remains non-dead for certain applications like backup, despite years of prognostication. However, you are correct that e-discovery of data on tape is incredibly difficult and time-consuming for most systems. There are tools to help, but an online archive is vastly more flexible and speedy than recovering backup data from tape. I’ve seen backup-sourced e-discovery costs rise into the millions of dollars, too!
• How important is classification in an archive solution? The importance of classification depends on the business objectives that an archive is meant to serve. However, most implementations will require at least some message classification mechanism in order to determine how long different messages should be retained, since a one-size-fits-all retention schedule is unlikely to meet anyone’s needs. Therefore, it is important to begin developing an overall record retention policy for email when implementing an email archive, and to consider how messages will be classified. Classification of email messages is a complicated topic – worthy of its own webinar at least!
• We are a globally dispersed organization which increases the complexity and cost. Do you feel implementation is an all or nothing scenario or does it make sense to focus on domestic and large campuses and then in a second phase chase funding for remote and international sites? Dispersed organizations face many unique technical challenges, especially when implementing email archiving. Certainly it is better to have some archiving than none at all, but unless your retention requirements are also segmented by geography, focusing on only a single location can be risky. I’d definitely suggest starting with the biggest fish, but you will probably have to get to everyone fairly soon afterward.
• Are there solution that do both email and file data (shared folders) archiving? Yes, some email archiving products also do file archiving. However, some choose to implement these functions separately to keep one from standing in the way of the other – it’s more important to have some archiving than to wait and wait for a complete solution.
• Not to mention, extremely short retention periods for email messages will NOT allow an enterprise to comply with litigation hold needs… Once a litigation hold is ordered, all retention schedules for covered data must be suspended. Therefore, a short retention schedule does not necessarily preclude compliance with a legal hold order. However, unreasonably short retention will not look good in court!

Tags: archiving, backup, business case, data archive, data backup, e-discovery, Email archiving, litigation hold, Mimosa, PST files, record retention, retention schedule, webinar