Re: Poll re: Email Journaling - Legal Copies of all messages

["Shamblin, Quinn" <qrs () BU EDU>]

Hello Cathy,

We do not currently journal at BU, but I am bringing this up to our general counsel and other internal groups as 
something that could help us manage some of the risks we face due to forwarding (and other issues).

In a previous role, we used Quest as a journaling/archival tool, but only for accounts for which we had a litigation 
hold or that were under investigation.  It was a pretty nice tool and also de-duplicated messages, saving a lot of 
storage space.

Warm Regards,

Quinn R Shamblin
-----------------------------------------------------------------------------
Executive Director of Information Security, Boston University
GCFA, CISSP, PMP  -  O 617-358-6310  M 617-999-7523


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Cathy 
Hubbs
Sent: Wednesday, March 02, 2011 2:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Poll re: Email Journaling - Legal Copies of all messages

Greetings!
We are preparing for a dialog with our Office of General Counsel regarding email. The conversation will include 
archiving, forwarding, and journaling. Today Quinn, from Boston University, was kind enough to forward the outcome of 
his poll regarding email forwarding. As a continuation on this theme I would appreciate input from the members 
regarding their use of Journaling. I will collect the answers and summarize back to the membership. Feel free to 
contact me offline if you prefer.

Consider the following definition of "Journaling."
Journaling is the process of making a pristine, irrefutable copy of all messages as they pass through the e-mail system.

With this definition in mind does your University use Journaling? Do you have a Policy that you can reference?


Thank you in advance.

Cathy Hubbs
Chief Information Security Officer
Office of Information Technology
American University
202.885.3998