Entries categorized under “Governance Risk and Compliance”

Whether we are talking about email, IM, Text, VOIP or any other communication stream, recent cases have challenged the presumption of corporate privacy, privilege and ownership. Proper policy and training seem to be the answer for domestic corporations who use a SaaS email provider or other US based Text/SMS provider. When dealing with world-wide infrastructure, a corporation must engage specialized counsel and actively monitor cases and publications like those of The Sedona Conference Working Group 6: International Electronic Information Management, Discovery and Disclosure. Although the rules seem to be changing, companies can make informed risk vs. cost decisions to minimize their potential exposure if they are cognizant of the issues and do not just pretend that they do not exist. (read more)

As corporations slowly face the consequences of unmanaged information assets, they have started to form ESI retention policies, acquire email archives and other enterprise technologies needed to track and dispose of newly created communications. It is much simpler to enable policy, process and technology to handle the go forward content than to deal with years or decades of accumulated unstructured content. Most public corporations have existing preservation requirements to deal with on top of possible long term retention regulations. (read more)

Last week's announcement that yet another vendor has made adaptations to its deduplicating system to support archive retention as a new system feature can mislead companies into drawing the conclusion that if this appliance works for backup that it is suitable for archiving as well. Many companies are frugal when it comes to storage purchases so if they can buy a disk-based appliance that addresses both their archiving and backup needs, they may be tempted to do so. (read more)

The State of Texas recently passed H.B. No. 2833 stating you must hold a license as a security services contractor if you "engage in business activity in which a license is required." The law then outlines that a company acts as an "Investigations Company" under Section 1702.104, (4) (b) "...includes information obtained or furnished through the review and analysis of, and the investigation into the content of, computer-based data not available to the public." Investigation is a key word in the statute and appears to be broadly defined and it has lead to confusion and controversy. (read more)

Processes that fluctuate according to the needs of the business, department and staff result in unique and unstructured content. The content and processes require a special type of handling, in the form of Intelligent Archiving. The archiving and ECM markets need to radically change their perception of solutions to these unstructured data problems. In an attempt to address this Autonomy is announcing Autonomy Information Governance, the first intelligent information governance platform. Their plan, according to their press release, is to address three cost and risk oriented business processes. (read more)