Re: Gmail confidential mode

[WALTER KERNER <Walter_kerner () FITNYC EDU>]

Our Council is concerned about accepting confidential emails from outside.
The concern is that if an email is on Legal hold, the sender could revoke
it, so you don’t really know what you have preserved.







Walter



Walter Kerner

Assistant Vice President and CISO

212 217 3415

[image: blue and black logo two lines png]



[image:
https://lh6.googleusercontent.com/UfFmyv7z6Vvv1txQ9YVAOzexd6VEBLzwpWJW_emTmE-oOg-W5_Er-7LKogTDdF3BU49D7-cZZK3K2fH0dwoA0uTH_g1zh8Ul4e1hHQOI8hw7GY3GgLzEhjAPLi7V6RLiQ3eXLu48]



*From:* The EDUCAUSE Security Community Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Jared Evans
*Sent:* Tuesday, October 08, 2019 8:53 AM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [SECURITY] Gmail confidential mode



We have gotten requests from several departments asking to turn on Gmail
confidential mode for our Google domain.



There seems to be no concerns in regards to retention and visibility into
the messages for emails sent from the Google domain.   As per Google
support on how Vault handles these confidential emails:

"If your organization enables Gmail confidential mode, Vault can hold,
retain, search, and export all confidential mode messages sent by users in
your organization."



However, I would like to know if there may be any other info sec issues
resulting from the use of confidential emails that may affect the decision
on whether or not to make this capability available to the users on our
domain.



-- 

Jared Evans
Information Security Officer
Gallaudet Technology Services
Gallaudet University

jared.evans () gallaudet edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community
list. If you want to reply only to the person who sent the message, copy
and paste their email address and forward the email reply. Additional
participation and subscription information can be found at
https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community