Pack-Rats by Law: A Message Archiving Primer
With the Sarbanes-Oxley Act, messaging archives have gone from a voluntary tic among pack-rat users to a regulatory necessity. Here's how to crate up the correspondence without overloading your LAN.
What have the iPod mini and an e-mail archiving application got in common? The answer is that both are must-have products that everyone who hasn't already should have on the shopping list.
iPod minis are just a bit of fun, but there's an important reason for implementing an e-mail archiving system this year: the Sarbanes-Oxley Act of 2002, designed to improve the accuracy and reliability of corporate disclosures, specifies severe punishments for company officers who fail to keep business documents. Although e-mail is often trivialized by its use for personal messaging, the courts regard e-mail (and attachments) - and the even more informal instant messaging - as business documents which must be retained for regulatory compliance. Sarbanes-Oxley specifies that business records should be kept for five years, and those related to audits and business reviews must be kept for seven years.
Even without Sarbanes-Oxley, e-mail and instant messaging archiving is important because any business, of any size, could face litigation, and e-mail is becoming increasingly important in litigation. The American Institute of Certified Public Accountants estimates about 10 percent of US companies had been ordered by courts to produce employees' e-mails by 2001. Tracing e-mails without a comprehensive archiving system can be extremely time consuming and very expensive: It can cost as much as $10,000 per hard disk to recover deleted e-mails, which may be demanded in court.
So what do you need to think about before installing an archiving system?
A first step is to find out if employees are using instant messaging clients. Tools to do this are available from vendors such as Akonix, FaceTime and IMlogic. If they are, then it's probably best to prohibit their use, and to switch to an enterprise messaging system which can be more easily controlled and archived using any of the leading products.
Next you'll have to evaluate the products available, from companies including IBM, Tumbleweed, KVS, EMC/Legato, Educom TS and others.
You'll also have to review your IT infrastructure and look at the feasibility of consolidating your messaging systems onto the minimum number of servers possible, to reduce the cost and complexity of implementing a single archiving system.
But more importantly, you'll have to consider the actual storage you propose to use. In a large company it's entirely reasonable to expect to have to store billions of e-mails and instant messages - for periods of up to seven years. You may wish to use an existing SAN, or, more commonly, use a dedicated and expandable storage system just for e-mails, instant messages and attachments. The key things are to look at the cost per terabyte for storing the information, the expandability of the storage system, and the costs.