First off, you're going to need to take an inventory of where your email is used and stored (Outlook, the web, personal phones, etc.). Next you need to determine your legal obligations related to email security and retention. How do the federal privacy and security regulations such as HIPAA affect your business? What about state breach notification laws?
You also need to decide how critical any/all of the emails are to your business - not only for future internal reference but also e-discovery. Deciding which emails are important will help to classify the different types of email. If that's too much of a challenge, at least consider separating out the emails that have attachments, since that's where a lot of sensitive information tends to be, and specific users or groups of users. This ensures that their email is handled and stored properly. As for instant messaging and social media messaging, if they're key to the business, you may want to consider bringing them into the scope as well.
This exercise is going to require the input from a lot of different people. You should never assume anything and don't just download someone else's data backup and retention policy and procedures off the Internet and believe that's going to be enough. At the very least, get your lawyer involved as he/she is going to be making a lot of key decisions related to this.
Dig Deeper on Disaster recovery planning - management
Related Q&A from Kevin Beaver
While most mobile platforms provide levels of security from mobile cryptojacking, IT must still be aware of the risks and procedures to address an ... Continue Reading
Android Oreo replaced the allow unknown sources setting with a new feature that enables users to selectively install unknown apps. Kevin Beaver ... Continue Reading
Equifax's Apache Struts vulnerability was an example of a scan not being read correctly. Kevin Beaver explains vulnerability scans and how issues can... Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.