Email Retention and Compliance

1
Email Retention and Compliance
James Blake PhD VP Product Management jblake_at_mimec
ast.com
2
Agenda

• 20 minutes
• 6 slides
• Drivers for Email Retention
• Compliance in the UK
• Retention for Compliance
• Retention Reality
• Mimecast and Compliance

3
Drivers for Email Retention

• Continuity of access to historical email
• Corporate Governance
• Acceptable Use Policy
• Potential litigation
• Compliance

4
Compliance in the UK

• Federal Rules of Civil Procedure (FRCP)
• Sarbanes-Oxley Act (SOX)
• Basel II
• Financial Services Act
• UK Freedom of Information Act
• European Freedom of Information Act
• Markets in Financial Instruments Directives
  (MiFID)
• EEC 4th/7th/8th Directives (EuroSOX)
• UK Companies Act

5
Retention for Compliance

• CIA Triad
• Confidentiality of email must be ensured
• Integrity of email must be ensured
• Availability of archive must be maintained
• All permutations of the email must be archived
• Strong chains-of-custody required
• Must provide quick and easy discovery

6
Retention Reality

• Retention is just one link in the email chain
• Firewall Denial of Service prevention
  anti-spam anti-virus anti-phishing email
  routing Intrusion Prevention disclaimer
  management continuity email marketing

• Links not integrated
• Weak chains-of-custody Integrity
• Each component may alter or generate messages
  Integrity
• Independent logs Confidentiality
• Total resilience difficult Availability

• Maintaining long term archive storage is
  expensive
• Migrations risk to integrity and decrease
  availability

7
Mimecast Compliance Solution

• Unified End-to-End Email Management
• Single platform
• Deployed as Software-as-a-Service with tight
  integration
• Confidentiality
• Unique encrypted storage grid technology
• Full forensic auditing role-based access
  control
• Integrity
• Immutable storage platform
• All derivatives of email storage stored
• Triply redundant data centres sourced from
  original source
• Availability
• Access natively from within Microsoft Outlook,
  via POP3 or via the Web
• Triply redundant data centres

8
Mimecast Solution

• Integrated solution
• One cost
• No Hardware, no software
• Spam and malware protection
• No quarantine
• Seamless continuity
• Outlook integration
• Bottomless archive
• Outlook integration
• Performance of locally solution
• Data Leak Prevention

9
Come and see us on Stand G205