Re: Exchange Online

[Jeff Choo <jeff_choo () WILLIAMJAMES EDU>]

Hi Alex,

We are evaluating it right now.  I am also love to see how everyone else does it.  Office 365 does offer a signed BA – 
but it seems there will be some configuration changes needed on archiving end + email policy change + training on our 
end to make it work.  We are currently using office 365 but have a policy that bans its use for PII/PHI.

Regards

Jeff Choo - Director, Information Technology | Information Security Officer
William James College
T - 617-327-6777 Ext. 1202
F - 617-477-2002
W - www.williamjames.edu
Jeff_Choo () williamjames edu

For support, please send your request to:
Email: support () williamjames edu
Web: http://support.williamjames.edu
Phone: 617-327-6777 x1600

Meeting the Needs... Making a Difference



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Everett, 
Alex D
Sent: Thursday, August 13, 2015 11:21 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Exchange Online

I am wondering if any of your organizations have sanctioned the exchange of PII or PHI via e-mail in Office 365 or are 
evaluating this.
Over time, we are seeing more security controls and features added to Office 365 and wondered if any other 
organizations had made this decision.
We have not yet made this decision and are not presently using Exchange Online/Outlook in Office365.
If you have or have not, or if you have a policy that you could point me to I would appreciate it.
Feel free to e-mail me directly if you don’t want to respond to all.

Sincerely,

Alex Everett, CISSP
IT Security Engineer
University of North Carolina at Chapel Hill