Re: Email retention

[Joanna Grama <jgrama () EDUCAUSE EDU>]

Dear Mark,

The Higher Education Information Security Council (HEISC) has created an Information Security Guide that contains 
electronic records management toolkit that may be of interest to you:
https://spaces.internet2.edu/display/2014infosecurityguide/Electronic+Records+Management+Toolkit

About midway through the document you can find a listing of institutional records management policies.

The Information Security Guide is aligned with ISO/IEC 27002:2013, an international standard which includes key 
objectives and implementation guidance to assist organizations with developing an effective information security 
program. What makes the HEISC Information Security Guide so unique is that resources and content included in Guide 
chapters are provided by higher education information security professionals with expertise in both information 
security and higher education.

Kind regards,
Joanna


Joanna Grama, JD, CISSP, CRISC, CIPT
Director of IT GRC and Cybersecurity Programs

EDUCAUSE
Uncommon Thinking for the Common Good
282 Century Place, Suite 5000, Louisville, CO 80027
direct: 720.406.6769 | main: 303.449.4430 | jgrama () educause edu<mailto:jgrama () educause edu>



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mark 
Reboli
Sent: Tuesday, March 15, 2016 7:38 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email retention

Hello all,  I am looking for information on what some of you are doing in regards to email retention. We have an 
exchange email system and have been reviewing different retention systems to work in concert with it.

Do you utize a retention system?

Which one (we are looking at the barracuda)?

How long do you retain email for employees (how far back)?

Do you view any email as student records ( which would require keeping for a specific period) ?

Do you have an email retention policy? If so can you please share it with me.

Thank you much



Mark Reboli
Misericordia University



Sent from my Verizon Wireless 4G LTE smartphone