I don't think there are necessarily the problems you envisage? The main
reason for using such systems is to provide a forensically sound/legally
admissible audit trail, so you don't want to mirror users email accounts?
The ability to search the entire organisations emails in relation to SARS
is a useful by-product. If all emails are sent/received through your
company email servers, all emails are copied, even emails sent from a
Notebook?
When you implement a system to do this, rather than taking "secret" copies
or snooping you are very open about it. It might even discourage the
sending of "incriminating" material in the first place (you use the 'phone
that isn't connected to the call recording system instead!!).
Chris
p.s. still seem to get plenty of out of office messages, even though I'm
not getting all "proper" ones!
Roland Perry <[log in to unmask]>@JISCMAIL.AC.UK> on
27/10/2004 14:22:36
Please respond to Roland Perry <[log in to unmask]>
Sent by: This list is for those interested in Data Protection issues
<[log in to unmask]>
To: [log in to unmask]
Subject: Re: [data-protection] Searching for e-mails
In message <000001c4bc26$e2876640$3fb068d5@ntlworld>, at 14:14:19 on
Wed, 27 Oct 2004, Ian Welton <[log in to unmask]> writes
>> It is not possible with email systems I know of (groupwise,
>> outlook) to search accross all accounts in one sweep. Maybe
>> in the future or already technology I am not aware of, but
>> not at the moment for sure.
>
>To my certain knowledge software existed at least four years ago which had
>that very functionality as part of an early beta addition to one of the
>established security/audit packages. If it has not been developed any
>further I wonder why? With FOI as well now the market would certainly seem
>to be there.
There are all sorts of problems implementing such a thing. Here's one
example:
You deploy some powerful snoopery take 'secret' copies of all the emails
your employees send and receive, and keep these in a central store.
[This will be a doubly clever trick if any of your employees send mail
from a notebook PC when out of the office].
You have an email policy that decrees that individuals manage their
local copy of the mail-base to delete particular kinds of emails on a
series of timed schedules.
How can you make the central store mirror the individual deletions made
by the users (it's not a functionality built into typical clients, and
there's no network traffic to snoop)? And is it even desirable? As an
audit trial it might make sense to keep the central emails longer, but
then you have a greater risk that incriminating material is kept hanging
around. If you delete them at the same time that the users are
*supposed* to, then they might not have yet; and so you'll always have
to search all the user PCs just in case.
--
Roland Perry
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
http://www.rac.co.uk
http://www.racbusiness.co.uk
http://www.bsm.co.uk
Any opinions expressed in this e-mail are those of the individual and not necessarily the company. This e-mail and any attachments are confidential to RAC and/or BSM and are solely for use by the intended recipient.
If you are not the intended recipient you must not disclose, copy or distribute its contents to any other person nor use its contents in any way.
If you have received this e-mail in error please forward a copy of this e-mail to "[log in to unmask]".
RAC Motoring Services: Registered England 1424399
VAT Reg No. GB 238640945
British School of Motoring: Registered England 291902
VAT Reg No. GB 239505847
Registered Office(s): 1 Forest Road, Feltham, TW 13 7RR
This e-mail and any attachments has been scanned for the presence of computer viruses. RAC/BSM accept no responsibility for computer viruses once this e-mail has been transmitted.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|