The Role Of Email Security In Meeting Regulatory Requirements
by Mark Sunner - CTO Message Labs - Thursday, 27 January 2005.
Bookmark and Share
There has been a tendency for some companies to dismiss regulatory compliance as something that they don’t really need to worry about, and it’s only other businesses that need to worry. Consider then what would happen if a legal disclosure order sought access to all email sent between Mr A and Ms B over a six month. Or if as part of an investigation all emails sent by finance and HR over the past two years had to be retrieved. Unless the organisation in question has efficient email back up, search and retrieval, this is likely to be a lengthy and costly process, and failure to provide the information could have serious repercussions.

It is easy to concentrate on the seemingly negative implications of ensuring compliance – it is expensive, complicated and time consuming. However, not enough attention is given to the benefits of being compliant. Investors pay a premium for shares in companies that can demonstrate they are well governed; in the UK and US this is estimated to be around 15-20% extra on capital value. In addition, businesses that can prove they are well managed tend to attract high calibre employees and customers. So quite apart from avoiding the long arm of the law and damage to brand and reputation, exercising good governance practice has some other major advantages.

Comprehensive email management and security solutions have a vital role to play in meeting regulatory requirements. As a basic rule, companies are advised to make sure that they seek proper protection from viruses and other malicious content. They must also ensure that they have taken reasonable measures to defend personal information relating to customers and employees.


One of the most effective ways of achieving this is to use a proactive Internet level service to foster a safer working environment, offering protection against previously unknown security attacks and breaches of confidentiality. A managed service can also help companies to adhere to regulatory requirements relating to archiving, storage, back up and retrieval.

Any organisation facing regulatory compliance, a growing number, must do a cost/risk equation. There is no doubt that it is expensive to comply – both in terms of hard cash and man hours. This is another reason why many companies are turning to a managed email security service, as it offers a predictable monthly expenditure which can be easily planned for.

Ultimately much of the successful management of IT compliance lies in the effectiveness of the business processes and monitoring systems put in place. But just as prevention is better than cure, ensuring that proper email security measures are activated and maintained can go a long way to easing the burden of complying with regulations now and in the future.

Spotlight

Information security executives need to be strategic thinkers

Posted on 17 June 2013.  |  George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.


Daily digest

By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
  

Weekly newsletter

With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.
  

 

DON'T
MISS

Mon, Jun 17th
    COPYRIGHT 1998-2013 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //