forensic archiving and compliance retention, access and protection for critical business information...

25
Forensic Archiving and Compliance Cryoserver Robin Bingeman [email protected]

Upload: rafe-small

Post on 28-Dec-2015

223 views

Category:

Documents


7 download

TRANSCRIPT

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Cryoserver

Robin [email protected]

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Legal retention requirements

• Increasing number of laws and regulations – SOX, FINRA, FSA, SEC, FDA, MHRA, HIPAA, IRS, FERPA, Consumer Liability, Basel II, Financial Services and Markets Act 2000, Taxes Management Act 1970, Common Law, …

• Email is evidence

• Evidential weight

• For example, emails may need to be retained for up to 6 years and beyond (two examples from the Limitation Act 1980):

– Legal action for simple contracts can begin up to 6 years after performance

– Personnel and training records to be retained for 6 years after employment ceases

• Privacy Legislation – (FMA 99, IRS, Data Protection 1998, Human Rights Act 1998 etc…)

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Problem and Cost Factors

• Mail stores are reaching capacity• Mail server is performing slower• Problem / cost - historic email data• No practical mechanism of retrieval• Back-up is taking many hours, in some cases 18+ hrs• Backup tapes:

– Very time consuming – one at a time– Recreate the whole environment– Discrete time periods at a time– Searching and retrieval - slow– Who is involved?– Audited?– Complete record?– Altered in any way?

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Cryoserver

Appliance Software

Managed Service ‘Cloud’

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Simple In-House Appliance

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Mirror for DR

Cryoserver Mirror

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Accessing the archive

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Alternative interface

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Back fill the archive

• Import Legacy email– PSTs– NSF– GroupWise– EMLs– MMLs– MBOX– And many other types

• Import straight from the mail server

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Stubbing

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Before – Mailbox Size 3.2GB

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Mailbox Size Reduction - Clientless

Forensic Archiving and ComplianceRetention, access and protection for critical business information

After – Mailbox Size 1.7GB

50% further

reductionfrom the last time stubbing

was run

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Stubbing Module

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Stubbing Module

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Daily Reports

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Forensic Archiving and ComplianceRetention, access and protection for critical business information

iPad / iPhone App Module

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Search

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Reply from App

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Business Continuity Mode

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Business Continuity Mode

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Back-up mail server.

Forensic Archiving and ComplianceRetention, access and protection for critical business information

Thank [email protected]