Forensic Archiving and ComplianceRetention, access and protection for critical business information
Cryoserver
Robin [email protected]
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Legal retention requirements
• Increasing number of laws and regulations – SOX, FINRA, FSA, SEC, FDA, MHRA, HIPAA, IRS, FERPA, Consumer Liability, Basel II, Financial Services and Markets Act 2000, Taxes Management Act 1970, Common Law, …
• Email is evidence
• Evidential weight
• For example, emails may need to be retained for up to 6 years and beyond (two examples from the Limitation Act 1980):
– Legal action for simple contracts can begin up to 6 years after performance
– Personnel and training records to be retained for 6 years after employment ceases
• Privacy Legislation – (FMA 99, IRS, Data Protection 1998, Human Rights Act 1998 etc…)
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Problem and Cost Factors
• Mail stores are reaching capacity• Mail server is performing slower• Problem / cost - historic email data• No practical mechanism of retrieval• Back-up is taking many hours, in some cases 18+ hrs• Backup tapes:
– Very time consuming – one at a time– Recreate the whole environment– Discrete time periods at a time– Searching and retrieval - slow– Who is involved?– Audited?– Complete record?– Altered in any way?
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Cryoserver
Appliance Software
Managed Service ‘Cloud’
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Simple In-House Appliance
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Mirror for DR
Cryoserver Mirror
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Accessing the archive
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Alternative interface
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Back fill the archive
• Import Legacy email– PSTs– NSF– GroupWise– EMLs– MMLs– MBOX– And many other types
• Import straight from the mail server
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Stubbing
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Before – Mailbox Size 3.2GB
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Mailbox Size Reduction - Clientless
Forensic Archiving and ComplianceRetention, access and protection for critical business information
After – Mailbox Size 1.7GB
50% further
reductionfrom the last time stubbing
was run
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Stubbing Module
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Stubbing Module
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Daily Reports
Forensic Archiving and ComplianceRetention, access and protection for critical business information
iPad / iPhone App Module
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Search
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Reply from App
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Business Continuity Mode
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Business Continuity Mode
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Back-up mail server.
Forensic Archiving and ComplianceRetention, access and protection for critical business information
Thank [email protected]