End to End Microsoft eDiscoveryin Office and Office 365

Quentin Christensen

90% U.S. corporations currently engaged in litigation

147 Average number of active lawsuits for $1B+ companies

$1M Average per case cost of eDiscovery

Fulbright & Jaworski, Gartner

Identify and

Preserve

Search and

ProcessReview Produce

eDiscovery Overview

Volume Relevance

eDiscovery Challenges

Preservation

Search and reduction

Export

Demo

Quick Investigation

Quick Investigation

Early case assessment

Fast, real time search

Answers in minutes, not weeks

eDiscovery simplified

Save time and money

Reduce risk

Key Takeaways

Advantages: in-place, real time, simple

Capabilities: In-Place Hold, Query, and Export

eDiscovery as easy as 1, 2, 3.In-Place Hold: protect content in-place in real time

Query: find up to date and relevant content quickly

Export: transfer content for review and production

123Across: SharePoint, Exchange, Lync, and file shares on-premises and Office 365

Demo

Compliance Center and Hold

In-place hold: content stays in Exchange and SharePoint, less storage space, lower costs, higher fidelityLocation and query based: hold entire mailboxes, SharePoint sites, or apply a query to hold less content

No impact to users: seamlessly create, edit, and delete without knowing its on hold

1. In-Place Hold

Lync ArchivingUser A Mailbox

Recoverable ItemsDeletions

Deleted Items

Inbox

Versions

Purges

DiscoveryHolds

Server side archiving

All Lync modalities captured (PC, mobile, web, OWA)

User A on holdHold state synced

Lync archives content into Exchange mailboxes when user is on In-Place HoldIncludes instant messaging and meeting content

SharePoint In-Place Hold

Admins cannot delete the hold data or site

Lists, feeds, documents, and pages are covered

Version history is preserved if versioning is on

User A Mailbox

Recoverable Items

Deletions

Inbox

Purges

Versions

Audits

Deleted Items

…

DiscoveryHold

Calendar Logging

(6) Messages purged by query based hold

(5) Message Edited

(3) Message deleted

(4a) Message “purged” by user (Litigation Hold / Single Item Recovery)

ExchangeLifecycle (4b) Message

“purged” by user (In-Place Hold)

(1) Message delivered

(2) Message moved to Deleted Items

Demo

eDiscovery Center

Real time: no need to wait for indexing, always live and up to date

Reduce: proximity search, rich query syntax

Make decisions: query and source statistics help you analyze

2. Query

Keywords and PropertiesQuery Example Results

“Executive Briefing” Any content that contains the words “Executive Briefing” together, anywhere in the document, page, or message.

“Executive Briefing” AND “Summary”

Any content that contains the words “Executive Briefing” and “Summary”, anywhere in the document, page, or message

filename:budget Any file with budget in its filename, such as 2014 budget projections.docx, 2015 budget priorities.pptx, 2014 budget planning.xlsx, and so on.

filename:2014 budget filetype:xlsx

Excel worksheets that contain the phrase 2014 budget, such as “2014 budget planning.xlsx” and “2014 budget review.xlsx”.

Executive NEAR(20) Briefing Any content that contains the word “Executive” within 20 words of ”Briefing”.

Demo

Export

Easy: download from SharePoint, Exchange, and file shares whether on premises or in Office 365 all at onceEDRM XML Support: growing industry standard for data interchange, import into popular review tools

Take it offline: Native files, PSTs, pages as .MHT, lists and feeds as .CSV

3. Export

EDRM XML 1.1 Support

59

Local Data

SharePoint

File Shares

Exchange

What about all my other data?Local Data

SharePoint Online

Exchange OnlinePSTS Files PSTS Files

Exchange Online

Provide a sketch of the data flow(s)

Detail here... 

http://go.microsoft.com/fwlink/p/?LinkId=314072

eDiscovery as easy as 1, 2, 3.In-Place Hold: protect content in-place in real time

Query: find up to date and relevant content quickly

Export: transfer content for review and production

123Across: SharePoint, Exchange, Lync, and file shares on-premises and Office 365

Key Takeaways

eDiscovery simplified

Save time and money

Reduce risk

Advantages: in-place, real time, simple

Capabilities: In-Place Hold, Query, and Export