Information Age: News, analysis & insight for IT & business leaders

 

Lost for words

25 February 2006  

Businesses are not just obliged to manage email. For many financial services firms, instant messaging has become a vital communications mechanism - but also one they must track.

A $1.45 billion fine, imposed on investment bank Morgan Stanley in May 2005, has done much to highlight the importance of a robust message archiving system. The award was imposed not because the judge had found conclusively against the company, but because Morgan Stanley executives had repeatedly failed to locate and hand over emails regarded as vital to the case.

But it is not just email that businesses are increasingly obliged to manage carefully. For many financial services firms, instant messaging has become a vital communications mechanism - but also one they must track.

 
 

Storage strategies

Save nothing

Perhaps more properly defined as an 'enforced deletion' policy, this approach is based on limiting the corporate exposure to liability. But this requires that businesses police deletion, ensuring that employees do not keep emails saved on local hard drives or forwarded to private email accounts. The consensus among analysts is that the majority of companies that have adopted a 'save nothing' approach will have abandoned that policy over the next few years.

Selected saving

The second option, that of saving selected messages, requires that businesses train users to tag messages. In this way, a system can recognise which messages to save, and which to discard, after an appropriate length of time.

Save everything

The difficulty in marrying the other two approaches with compliance requirements has forced some businesses to adopt a 'save everything' strategy. The purpose is to retain relevant email for the longest length of time mandated by either corporate retention policies or by external regulations. To minimise the impact of this on the business, IT departments can implement hierarchical storage or information lifecycle management, where emails are moved to cheaper media as their importance diminishes.

Source: Gartner/Information Age

 
 

Wall Street's SEC rule 17a-4, for instance, mandates that traders using instant messaging must ensure messages are archived and retrievable - and are able to show that the stored version has not been tampered with. Those kinds of records provide strong evidence in cases such as that of Fulcrum Global Partners where, in February 2005, the US National Association of Securities Dealers (NASD) fined a research analyst for circulating rumours about a company via IM, while simultaneously short selling that company's stock.

When it comes to archiving instant messages, businesses have three main choices: to use the basic archiving capabilities of enterprise IM platforms (consumer IM products such as MSN and Yahoo Messenger have no facilities for capturing messages as they are exchanged); implement an IM gateway that can provide advance archiving features; or export the messages into a message archiving system.

Whatever the technology choice, the principal of IM archiving should be the same as those applied to email, says Erica Rugullies, principal analyst at IT management consulting group, Forrester Research. By storing emails and IMs in the same archive system, businesses can "gain the benefits of a consistently applied policy: a single place in which to perform supervision activities; a reduced number of locations in which to undertake discovery; and reduced training requirements."

Storage strategies

In developing common message archiving policies, businesses still face some tricky choices. At supermarket group Somerfield, its 3,500 email accounts generate 100,000 incoming and outgoing messages each month. The email system is frequently used to negotiate with buyers, leaning that any email could potentially contain vital information. Using email archiving software from Veritas (now part of security and storage software vendor Symantec), the supermarket has stored 11 million emails since introducing the software in March 2002.

But Somerfield's approach of retaining all email is impractical for some. The BBC, for instance, has "a very definite retention strategy that includes deletion," explains Keith Little, head of IT. The organisation is faced with twin pressures of legal regulations, such as the Freedom of Information Act, and business pressures - in its case, to direct the maximum amount of licence fees into programme making.

"We've gone down the road of introducing an information management policy," says Little, "where the value of data to the business is assessed, and the way it is stored is based on its value. Email is defined as business critical."


Comments 

There are currently no comments on this article

People who read this also read...

Platform Computing - Category winner

Since 1992, Platform has established a reputation as an industry leader in High Performance Computing (HPC) management software, bringing the most powerful commercial HPC solutions to leading global enterprises.

 
Advertisement

White Papers

Read article

Developing ios Solutions for Business

Whitepapers

Quickly develop and deploy custom iPad and iPhone solutions. With FileMaker Pro, iPad and iPhone solutions can be prototyped and completed in hours or days versus weeks or months. No iOS application programming or design experience is required.

Read article

IDC Spotlight: Access Control and Certification

Whitepapers

Read this brief for best practices on managing user access compliance.

Read article

GPS World

Whitepapers

Is the PREMIER global media brand serving the exploding world of positioning and navigation for OEM, commercial and consumer applications.

More
div class="banner">