Re: Poll re: Email Journaling - Legal Copies of all messages

[Terence Ma <Terence.Ma () TUN TOURO EDU>]

At Touro University Nevada, as I understand it, we journal all email in/out through our Barracuda archiver appliance. 
Journal data is kept for five years per our data retention policy. We also are about to install the Commvault archival 
system (mostly for eDiscovery purposes). At some point, we may move from journaling to whatever it is that the 
Commvault uses for archiving all email.

Sincerely,
Tere

Terence P. Ma, PhD
Chief Information Officer
Touro University Nevada
874 American Pacific Drive
Henderson, NV 89014, USA
P:  702-777-1805
M: 702-469-1770
F:   702-777-1736
E:   terence.ma () tun touro edu<mailto:terence.ma () tun touro edu>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Cathy 
Hubbs
Sent: Friday, March 04, 2011 10:51 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Poll re: Email Journaling - Legal Copies of all messages

Thank you Patrick. I've only received one other response offline which is similar to yours.

Initially we began investigating archiving solutions with a focus on improved service performance and reliability, with 
journaling as a longer range goal.  We believe journaling (pristine copies of all email) isn't widely used amongst most 
university's but would prefer to get some more input before leaping to this conclusion.

I would love to hear from others.

Thanks in advance.

Cathy




From:        "Feehan, Patrick" <Patrick.Feehan () MONTGOMERYCOLLEGE EDU>
To:        SECURITY () LISTSERV EDUCAUSE EDU
Date:        03/04/2011 10:02 AM
Subject:        Re: [SECURITY] Poll re: Email Journaling - Legal Copies of all messages
Sent by:        The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
________________________________



Cathy:

We do not do true journaling.  We have a inbox limit and people are responsible for maintaining emails within that 
inbox limit.

We reviewed several archiving products this past year in an attempt to get to that pristine place you mention, but 
archiving, as a sole technical endeavor, seems to be giving way to larger views of enterprise data management.  Gartner 
recently ended support for their Magic Quadrant for E-Mail Active Archiving and is replacing it with the Magic Quadrant 
for Enterprise Information Archiving (EIA).  The thought is that Exchange 2010 and the need for SharePoint archiving 
and other content types will create some new offerings.

Our "vision" is to get to a journaling after 2010 is implemented and the determination of content types for archiving 
is made.

Patrick


________________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Cathy Hubbs 
[hubbs () AMERICAN EDU]
Sent: Wednesday, March 02, 2011 2:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Poll re: Email Journaling - Legal Copies of all messages

Greetings!
We are preparing for a dialog with our Office of General Counsel regarding email. The conversation will include 
archiving, forwarding, and journaling. Today Quinn, from Boston University, was kind enough to forward the outcome of 
his poll regarding email forwarding. As a continuation on this theme I would appreciate input from the members 
regarding their use of Journaling. I will collect the answers and summarize back to the membership. Feel free to 
contact me offline if you prefer.

Consider the following definition of "Journaling."
Journaling is the process of making a pristine, irrefutable copy of all messages as they pass through the e-mail system.

With this definition in mind does your University use Journaling? Do you have a Policy that you can reference?


Thank you in advance.

Cathy Hubbs
Chief Information Security Officer
Office of Information Technology
American University
202.885.3998