Educause Security Discussion mailing list archives
Re: [External] [SECURITY] Account Retention/Email retention
From: "Gregg, Christopher S." <csgregg () STTHOMAS EDU>
Date: Thu, 23 Sep 2021 13:55:16 +0000
We don't have an e-mail specific retention policy. If an e-mail constitutes a record then it is subject the retention period of that record type. We do use the Microsoft Litigation Hold function for situations where we need to preserve e-mail and then release the hold when the situation is resolved. These requests are almost always triggered by requests from our Office of General Counsel. A few years ago I tried to go down the path of an e-mail retention policy with the opposite objective. I wanted to purge all e-mail older than X out of concern for old e-mails with sensitive data, especially since our student ID numbers were once SSN's during the lifespan of our e-mail data (carried forward over multiple upgrades). I received a lot of push back and complicated exception requests so that we ended up side stepping that and focused more on MFA and DLP. Thanks, Chris From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jeremy Livingston Sent: Thursday, September 23, 2021 7:59 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [External] [SECURITY] Account Retention/Email retention Friends, I'm looking for some examples of account retention and email retention at your schools. While legal wants to hold all emails for 7 years (statute of limitations on most crimes), that comes at a cost, and it would be great to have a basis for comparison. Thanks for any information you can provide, and feel free to send it directly if you don't want it shared more widely. Jeremy M. Livingston Chief Information Security Officer M 973-985-4996 STEVENS INSTITUTE OF TECHNOLOGY<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.stevens.edu%2F&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632699328%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=YZIwHqVeTzPYCvFj6vs%2FHqDIGgJU7lGLKOqLfT3hcGQ%3D&reserved=0> facebook<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2FStevens1870&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632709285%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=NDKzorNoQL8KK2p6zjrttHZ7YZW%2Fv%2BgDPUrgS4wyi2w%3D&reserved=0> * twitter<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FFollowStevens&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632709285%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=fiUGgUkMudUaY6EToqCZPonchisa5%2FzWlfpz0J7H7EA%3D&reserved=0> * news<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.stevens.edu%2Fnews%2F&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632719242%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Th1BVetaqJeQXOI9xahpn8r%2F%2BFrWIhYM5QOKTS0HWDw%3D&reserved=0> * youtube<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2Fuser%2FEdwinAStevens70&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632719242%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=25wAMjm4uua8%2BWi5%2BT7FzipNrbcdmNLwwOZLP5WLe4k%3D&reserved=0> Report Phishing To report phishing, please click the "Report Phishing" button in outlook: [cid:image001.png@01D7B057.36DC4E90] ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C9228f6e04b634434e1dc08d97e91ed94%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C0%7C637679987632719242%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ATMDgwyK6mPSLY4KwOyxPUNJIC39y1MjvZvgoumLoaM%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Account Retention/Email retention Jeremy Livingston (Sep 23)
- Re: [External] [SECURITY] Account Retention/Email retention Gregg, Christopher S. (Sep 23)