RE: Policy clause issues

["Mark Palmer" <mpalmer () hoovers com>]

Unless you actively & regularly review the contents of emails *and*
demonstrate to employees that you are actively & regularly reviewing the
contents of emails, an employee will be inclined to think there is an
expectation of privacy.  This perception of an expectation of privacy is
a valid defense.  Take a moment to read the following article:
http://www.securityfocus.com/columnists/421 and the court case mentioned
in the article
(http://www.armfor.uscourts.gov/opinions/2006Term/05-5002.pdf).

Disclaimer - I am not an attorney.  Be certain to check with your legal
counsel on any legal matters before moving forward. YMMV based on your
context.

Mark Palmer
IT Security Compliance

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Saqib Ali
Sent: Thursday, December 07, 2006 8:29 AM
To: Faheem SIDDIQUI
Cc: security-basics () securityfocus com
Subject: Re: Policy clause issues

nothing seems to wrong/illegal with the clause. however you might want
to post this at http://www.securityfocus.com/archive/139   (psrc) to
get a better response

saqib
http://www.full-disk-encryption.net

On 12/6/06, Faheem SIDDIQUI <fahimdxb () gmail com> wrote:
> Is it alright to insert this clause into your IT Security policy:
>
> "All company e-mails are owned by ABC Corp. and ABC reserves the right
> to review the contents whenever deemed necessary after obtaining the
> necessary approval. Unless shifting of locations within ABC is
involved,
> no email backup/restore requests will be entertained."
>
> Are there any legal/other implications of this..irrespective of the
> countries ?
------------------------------------------------------------------------
---
> This list is sponsored by: ByteCrusher
>
> Detect Malicious Web Content and Exploits in Real-Time.
> Anti-Virus engines can't detect unknown or new threats.
> LinkScanner can. Web surfing just became a whole lot safer.
http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetec
t
>
------------------------------------------------------------------------
---
>


-- 
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

------------------------------------------------------------------------
---
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetec
t
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------