Security Basics mailing list archives

RE: The answer is, "you cant"


From: "Xphox" <xphox () xphox net>
Date: Wed, 22 Oct 2003 09:31:40 -0400 (EDT)

Mike, and list,

We wouldn't be oursourcing all our email.  Example, our email from
@domain.com would still be run by us.  However @newsletter.domain.com
would be run by them.  Just to clear it up, incase I was unclear in my
first post.

I've got some awsome responces from you folks, and would really appreciate
anything else you can throw at me.  Especially if you have experience with
this area.

Also could anyone recommend a commercial package that would do something
along the lines of what I was describing?  Preferably running on Windows,
but not necessary.

Thanks,

<snip>Mike Molloy</snip>
I would agree with Dave and go further by saying that an external
company could never be as responsive to your companies needs as you
could be. Our parent company outsourced their email, however on seeing
our system could be customized and statistics obtained in minutes
instead of days or weeks they are now installing a new mail system based
on ours. Email does not have to be insecure just because you allow
Marketing license to use it as a marketing tool, after all it is very
good for that purpose. Think long and hard before outsourcing so
fundamental a tool as email.

Regards
Mike Molloy
IT Supervisor


-----Original Message-----
From: Dave Hartnell [mailto:enzeit () xtra co nz]
Sent: 21 October 2003 23:20
To: Nicholas Diotte
Cc: com, Secuirty Basics with SecuirtyFocus.
Subject: The answer is, "you cant"

Hi Nick. My 2c worth is this.

Outsourcing your email services to a 3rd party not only creates a
security
risk but also a commercial one. You would essentially relying on a 3d
party
to protect your corporate image and reputation.

Internal and external email is a fundamental service and responsibility
for
you to provide and also a key way you can enable marketing to help grow
your
business. Emails contain a lot of commercially sensitive information and
none more so than marketing. Control over how and when that information
is
sent is vital to protecting your companies competitive advantage.

I would review the reasons you dont allow marketing to include quality
content. I assume it either size or security considerations)

Having been involved in marketing before, I can say image does matter.
The
look and feel of email content, presentations etc are important to
looking
successful.

Try this approach. Sit down with marketing, find out what content
exactly
are they looking for in their emails and agree on some standards that
meet
those needs and are balanced against what you feel are important IS
considerations. Then allow them to use your own servers for the job.

All will win, you haven't opened it up to all and sundry (just
marketing),
Marketing get what they need. You haven't exposed your company to risk,
commercial or otherwise and you have enhanced your reason for being and
should be happy that you are contributing to the bottom line in a
meaningful
way.

Kind regards


Dave Hartnell
Company director.
Enze IT.

-- 
Nick Diotte
Xphox.net
____________________________________________________
Email: xphox () xphox net  Cell: 519.819.0674

-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/SS d--(++) s++:++ a-- C+++ USB++ P+ L+++ E----
W++(+) N++ o? K--- w++ O M-(-) V-- PS+++ PE- Y+ PGP
t++ 5+ X++ R++(TSR) !tv b DI++ D++ G e(++) H--(*) r% y+
------END GEEK CODE BLOCK------



---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new 
network analysis tool that 
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
----------------------------------------------------------------------------


Current thread: