I hope many folks have discovered the potential for evidence retention that email servers can deliver. In my personal SOX efforts, we found that many disconnected systems but interdependent functions had a range of emails already passing around, telling the person downstream that processes were complete and they could begin.

By simply managing distribution lists which include archive folders, we now have evidence of these critical communications, and have had business owners add validation language and necessary attachments to the emails they were sending anyway. It has reduced the number of binder we need to keep, and blends seemlessly into our existing processes.

I just came across this article by Mary Kay Roberto and thought it might be of interest to those just beginning to think about email archiving.

article: E-mail Archiving - A key piece to a compliance strategy

Best,
tl

__________________
Toby Lucich
toby.lucich@insidesarbanesoxley.com
http://www.insidesarbanesoxley.com