What does email Management Mean to You? by Tom Reding, CRM Principal, Information Governance tom.reding@emc.com 352-212-2430 1
Tom Reding, CRM Principal, Information Governance Practice Tom Reding is a recognized authority on Knowledge, Content, Document & Records Management, Data Governance, Litigation Support and Privacy. In his role as a Principal in EMC s Information Governance Practice, Tom works with EMC s customers to help them solve their challenges with regulatory compliance, litigation support and privacy. Tom is a long-time member of ARMA, AIIM & NIRMA. Tom has received industry-wide recognition as an author, presenter and contributor to industry standards and guidelines. Prior to joining EMC, Mr. Reding spent over ten years consulting with Fortune 500 companies and public sector clients. Prior to that, Mr. Reding spent 25 + years practicing regulatory compliance and litigation support in some of those same Fortune 500 companies and federal agencies. Tom is a Certified Records Manager. 2
Proactive e-mail Management, ediscovery and Records Management Paving the Way to Good Information Governance 3
Paving the Way to Good Information Governance Introduction Cut Costs Simplify ediscovery Manage Risk Gain Visibility Looking Forward INFORMATION GOVERNANCE 4
email Management ALSO CALLED: email Administration, e-mail Management, Email Response Management, Mailbox Management, e-mail Response Management, Electronic Mail Management, e- Mail Administration DEFINITION: email bankruptcy is an acknowledgement that your e-mail has become unmanageable and the decision to either purge your inbox and start afresh or, more radically, to renounce e-mail altogether. The origins of e-mail bankruptcy as a term are not clear. One of the earliest examples of the practice, whether identified as such or not, was by Stanford computer science professor Donald E. Knuth. Electronic Code of Federal Regulations defines Mail Management at: http://ecfr.gpoaccess.gov/cgi/t/text/textidx?c=ecfr&rgn=div5&view=text&node=41:3.1.1.7.46&idno=41 5
Why Manage email? Facts The average corporate e-mail user sends/receives about 11 MB of data per day in 2010. This figure is expected to rise to about 15 MB per user, per day in 2014 (Source: Radicati) 80% of organizations restrict mailbox size through quotas (Source: Enterprise Strategy Group) 80% of ediscovery incidents involve email (Source: Enterprise Strategy Group) Problem email growth = high costs and compliance risk Evidence Unmanaged PST and NSF files High Storage Costs Poor Performance Slow Backup and Restores 6
Problems Related to Managing Email and Other Electronic Systems % Increasing message size 55% Increasing backup and restore times 51% Using e-mail as a knowledge store 41% Lack of messaging-related disk space 37% Mailboxes being overloaded 35% Enforcing an e-mail retention / deletion policy 35% Protecting intellectual property 30% email continuity (making sure e-mail runs 24/7) 30% Lack of bandwidth 29% Osterman Research, Content Archiving Market Trends, 2010-2013 7
Who are the email Management Stakeholders? Chief Financial Officer Corporate General Counsel Corporate Information Officer Corporate Compliance Officer Corporate Risk Manager Corporate Records Manager e-mail Administrator Storage Administrator IT Security Manager Human Resources (training) 8
Examples of different email Management deployment models include: Outsourced Solutions or Cloud Service Models to include: Software as a Service (SAAS); Platform as a Service (PaaS; and Infrastructure as a Service (IaaS). Deployment Models for Cloud Solutions include: Public; Private; Community; and Hybrid. 9
Reduces storage requirements by as much as 50% and improve backup operations Retain only what you need & disposed of the rest email Management Claims Improves performance & scalability by up to 60% and more Accelerates upgrades and migrations Improves the business user experience Offers next generation support for Cloud, SaaS, Virtualization, De- Duplication 10
Examples of different email Management deployment models include: Traditional in-house deployment models include: Optimized email Archiving Solutions Enterprise Content Management Solutions 11
Locations where e-mail is often Captured at include: Journal Servers (just in-side the orgs. firewall) email Servers (Exchange / Domino) Desktop (Outlook / Notes) 12
Are all emails in your organization considered equal from a retention standpoint? If the answer to this question is yes, I encourage you to evaluate case law on this matter. If the answer to this question is no, then you need evaluate which method of determining what is and is not a business record and if a business record (automated or manually), what kind of business record is it and what retention rule applies (again automated or manually). 13
INFORMATION GOVERNANCE 14
email continues to be the dominant communications tool, file transport mechanism and content repository for most companies and corporate users. Osterman Research, 2011 15
Users considering themselves pack rats when using e-mail for <120 minutes a day users considering themselves pack rats when using e-mail for >120 minutes a day Are you still using your email system as a filing cabinet? Source: Osterman 2010 16
email Management to some is achieved with email Archiving email Software Archiving Software Proactively manage and dramatically reduce mail store sizes Reduce associated storage, network, and backup costs Optimize environment efficiencies Manage and optionally remove the need for PST/NSF files Improve readiness to deal with ediscovery, facilitate corporate governance, and manage overall business risk Quickly find and restore email Quickly search ingested PST/NSF files Automatically and consistently enforce retention and disposition policies 17
Phased Approach to email Management in the Context of email Archiving email Archiving offers four phased approach to managing mailbox size and retention as content ages Ingest A copy of e-mail is taken from the mail server either real time or by schedule Shortcut Part or all of an attachment or a message is removed from mail server, replaced with a pointer to the archive s copy Delete Message on the mail server is deleted Dispose Message in the archive is deleted 18
email Archiving Features Real time, historical, or user directed message ingestion methods Find, ingest, and optionally eliminate personal mail files Automatic disposition based on centralized business policies Enterprise-wide single instancing Offline access Cache mode on/off Seamless end user experience for shortcutted messages Web based archive search Universal URL for Shortcut Support for mobile device access 19
Three Methods of Ingesting email Real Time Ingest messages as they are sent & received Leverages journal facilities Scheduled Single task for historical messages Schedule recurring tasks for proactive management User Directed Users ingest messages on-demand Varying retention policies per folder Access from any client (desktop, mobile, etc.) EMC SourceOne Archive Infrastructure Tiered Storage 20
User Directed Archiving Create archiving activities that create User Archive Folders in end user mailbox Users simply drag & drop messages into folder area to enable ingestion Custom folders can be created Each configured folder can have its own retention Folder permissions can be set to enable Community capabilities 21
Eliminate Personal email Archives email Management offers two options for PST Ingestion: User Desktops Before Enterprise SAN Crawl network shares and ingest into the archive: Searchable from the web based search Used for ediscovery File servers Mail Servers Crawl network shares and ingest into the archive with client visibility: Maintain original PST structure in Outlook/OWA Shortcut as ingested Eliminates need for PST while providing seamless functionality User Desktops After Email Management Server Mail Servers Tiered Storage File servers 22
Managing Mailbox Growth CONSISTENT REPEATABLE email Management offers phased approach to control mailbox sizes without restrictive mailbox limits Shortcut process leaves content on mail server but only a small fraction; still accessible via inbox Reduce primary storage requirement by approximately 60% Example: Content 90 days old Deletion remove from inbox; accessible with archive search Example: Content 2 years old 23
Anywhere, anytime, anyplace mobile access Seamless integration into Outlook & OWA Offline access to shortcut content Universal URL capability provides access to any other client Simple web-based search client 24
email Archiving Results in email Management Company Profile: Microsoft Exchange 40K + Mailboxes 40% of Employees outside of US @400 sales offices Publicly traded company NYSE - EMC Industry: Focus on information infrastructure with commitment to acting in a socially and environmentally responsible manner Goals for email Archiving: Improve storage management Improve user experience Eliminate PST files Reduce discovery time and effort Results - email Management Lifted restrictive mailbox quotas Eliminated PST file creation Reduced production storage requirements by 60% Cut discovery time from several days to minutes or hours Backup times reduced from 10-12 hours to several hours (2-3) 25
Capture and File Content in ECM Repository Capture content in business context, as a natural part of daily workflows Microsoft Outlook Drag n Drop E-mails (Single/multi select) Attachments Outlook Folders Files from desktop Microsoft Outlook Rules ECM Toolbar or Menu Send and Save ECM Toolbar or Menu Move/Copy Microsoft Outlook Copy/Paste Repository folders in Outlook Repository Platform Storag e 26
How do you see an ECM Repository inside Outlook? Exposing an ECM Repository inside Outlook 27
Proactively Manage Mailbox Sizes Mail Stores Archive Shortcut Delete Single Instance one copy of each original email message, calendar item, etc. Tools: Historical Archive, Real time capture, User Directed Archive (UDA) Example: Archive all e- mail for Accounting Department in Real-time (journal) 28
Proactively Manage Mailbox Sizes Mail Stores Archive Shortcut Delete Leaves a small fraction on mail server; still accessible to users via mail database Tools: Local Replica, web search tool, Discovery Manager Example: Content 90 days old 29
Proactively Manage Mailbox Sizes Mail Stores Archive Shortcut Delete Remove from mail server; user access by searching the archive Tools: Web search, Discovery Manager Example: Content 2 years old Users can still easily access their old emails. In fact, in many cases they can get them even faster because network performance is so much better - Network Security Administrator 30
User Impact of Shortcut Process Before 31
User Impact of Shortcut Process After 32
User Impact of Shortcut Process After 33
Historical Access to Archived Data 34
Why User Directed Archiving? Complement to traditional e- mail archiving capture methods Customer benefits: Replace personal archives Balance privacy requirements Flexibility in archive structure Support discovery searches, legal holds 35
User Directed Archiving: A Win-Win Scenario Users: Retain important business emails in inbox Offline, anywhere access Administrators Centrally managed Corporate-enforced retention policies Configurable at folder-level based on business needs Storage management benefits De-duplicated Compressed Full text indexed 36 36
Centralize Administration 37
End User Environments Desktop Integration Outlook Notes Office Offline ipad MS Outlook Repository Offline Desktop ipad Lotus Notes Maximize productivity by leveraging known productivity tools. 38
Zone Management of email Transient Should Delete! Auto Dispose short retention Working Content Can be kept make it easy Longer retention Records Must be kept Proper Retention & Governance Disposed by Records Management Solution 39
Zone Management of email Comprehensive email Management Provides proper declaration and classification of e-mail content while automatically disposing of transient, non-essential email Automated Records Declaration Auto Classification With Human Oversight delivers operational efficiencies while enabling end-users to participate in the records management process Intuitive User Experience Increases end-user e-mail productivity while reducing the costs and risks associated with over-retention Zone Management of email provides Enterprise Governance of e-mail content resulting in: Dramatic reductions in e-mail and storage management costs Improved ediscovery processes Enhanced legal, regulatory and business policy compliance Greater productivity for e-mail users 40
Automatic Disposition ROT: Redundant, Outdated or Trivial 95% of all e-mail is not accessed after 60 days Operational risk and litigation exposure if retained IT storage and management costs, being outpaced by explosive growth in data volumes Requires NO user action! Automatically, defensibly disposed based on your policies 41
Proper Retention and Governance of email Record Content Important for legal, regulatory or corporate policy reasons Must be kept; retention and disposition varies Centrally managed by the organization as Records Auto classify e-mails with human oversight Users apply classification with a mouse click 42
Improve the User Experience Active content important to users Comprised of business and personal content Arranged in the manner they work: filers and pilers, sweepers and keepers May evolve to ROT or records Self-managed the way each user works, with Configurable size and space policies for improved IT management 43
Example Configuration Dispose: Inbox at 180 Days Sent at 180 Days Calendar Items at 400 Days after event Tasks at 60 Days after Completed Manage: 800 MB quota 2 year retention Retain: Users Declare and Classify against the Company s Classification Schedule / File Plan Retention and disposition managed by centrally by Records & Info Mgmt Accessible by users Indexed for ediscovery 44
Classification Options Manual Automated Example: End-users are dictated policy, but not provided easy and fast tools for declaration and classification Example: Install software at the server to dispose of the unimportant, and classify the important Positives: Humans are most accurate (?) Low email retention rate of <20% is achievable Positives: Consistency in effort Low on-going cost Good for consistent types of content, not e-mail (?) Negatives: Perceived productivity drain Participation may decline, causing reduced accuracy/consistency Negatives: Over-retention due to low thresholds, likely 50% or more retention Time consuming to train email can vary and impact high reliability 45
Best of Both Worlds Manual Automated Auto-classification with Human Oversight Automate Records Declaration & Classification Make it visible Users are in control and can correct to over-ride the automated decisions 46
Discover and Act on Legacy Information File Intelligence Understanding what you have File System Email Server Intelligently Identify Records Migrate & Secure Records SharePoint Content Repositories File Intelligence Secure Repository + Retention Policy Personal Email Archives Notebook and Desktop 47
How File Intelligence Works Catalog Analyze Act Classify Search Report Crawl data sources Build index Metadata basic Metadata with document type Metadata with hash Deep crawl full text Deep crawl with classification Classify files based on metadata, keyword content, and pattern matching Age, owner, location, file type, etc. Business value, security risk, intellectual property, PII, PCI Analyze data with search and report tools Semantic search with Boolean, proximity, stemming, phrase support More than 30 pre-built reports out of the box Custom reports as needed Robust action set Move, copy, delete, retain, export, tag Policy-based actions One-time Scheduled Recurring 48
Process Flow for Legacy Info Capture Secure, Retain, Discover 3 1 File Intelligence 2 Content Capture / Archiving Enterprise Retention Electronic Discovery 4 RPS File Intelligence Crawl, Index, analyze, search, report information repositories in-place Take action upon the discovered information assets Examples: Decommission non-required information in-place, capture & classify records 49
Client Experience with File Intelligence ~24% of unstructured data is actively used ~48% is stale: not touched in 6 months ~18% are duplicates ~6% is unknown or orphaned ~4% is not business related - pictures Active, known, relevant Stale 24% 48% Cost to the Customer: It consumes expensive storage capacity It gets managed, backed up, replicated,... It poses serious legal & compliance risks It gets recovered equally in a DR scenario Duplicates Unknown 18% 6% Non-business 4% related * Results from 37 File Intelligence customer assessments Stale is defined as files not accessed or modified for 6 months 50
Analytics for ediscovery Full Case Management Workflow New case creation Assignment of lead attorney & reviewers Case specific collection & culling Legal case processing Document review & analysis Case Tracking Preservation Notification Collection Status email notification to custodians Document Review Status Customize e-mail messages per matter Reviewer Workload Full tracking during hold notice lifecycle Reviewer Progress Tracking Automatic reminders Custodian or Proxy acknowledgment Keyword Hit Report Early case assessment throughout the ediscovery process Identify relevant, important data Analytics on relevant legal case data email communication threads Prepare for FRCP meetings Legal Hold Notices email Threading Custodian & Concept Analysis 51 51
INFORMATION GOVERNANCE 52
What do I do if I don t have a solution for email Management? That state of ignorance is dangerous. Companies that are ill-prepared may face enormous e- discovery costs, if they have to scramble to meet urgent, court-ordered demands to produce information. Association of Certified E-Discovery Specialists (ACEDS), 4/2011 53
Paving the Way for ediscovery email Management gives you a starting point to manage retention and a consolidated place to search for e-mail Source: EDRM.NET 54
Making ediscovery Repeatable ediscovery Solutions can guide you through the discovery, collection, culling, analysis of your archived data Source: EDRM.NET 55
Example: ediscovery Management 1. Discovery Management performs baseline ediscovery 3. Advanced analysis and review of data in legal hold folders 2. Results are placed into legal hold folder 56
Simplify ediscovery Matter identification with secure matter management Comprehensive collection and preservation of archived data Discovery Manageme nt Defensible processing, analysis, and review Flexible export 57
INFORMATION GOVERNANCE 58
The longer term solution to e-discovery issues is as part of an information governance strategy. Gartner's view is that any tactical e-discovery decisions that are made in 2010 need to be made with this longer term goal in mind. All the arrows are pointing in this direction, because the only way to clean up the mess, decrease the storage-related cost burdens, make individuals more productive and decrease the discovery cost and risk is to get better control of enterprise information. - Gartner, E-Mail Archiving and E-Discovery: What to Do Next, 12/2009 59
Managing Risk Source: AIIM 60
What are Your Retention Policies? 61
The Retention Dilemma Message Server Convenience Copy email Archive = Cost Effective Long Term Archive Automated or scheduled Single instanced Manage w/address rules Secure 10 yrs 6 yrs 62
Minimizing Risk, Achieving Compliance Manufacturing Healthcare Customer Care Human Resources Proactively monitor e-mail archive for compliance with policies and regulations 63
INFORMATION GOVERNANCE 64
You Will Need to Produce Content Produce e-mail for legal reasons Produce e-mail as part of a audit Use archived content Are you regulatory still using for pre- your email instant discovery Ordered to produce messages system as a filing cabinet? Source: Osterman Research 2010 65
email Proliferation User Desktops Enterprise SAN Look Familiar? email Servers File servers 66
User Desktops email Management Server Tiered Storage Any Better? email Servers File Servers 67
Gain Visibility into email Files 68
Putting it All Together Collect Real-time Scheduled User Directed Archiving PST collection email Management Server(s) Organize and Classify Address Rules Retention and disposal policies Unique ID for single instancing User/Admin searches Web-based search to access archive Full Text Index Optional indexing of messages, attachments Includes embedded and Zip messages (20 layers deep) Ability to set indexing policy at folder level Messaging servers NSF Collection Store Container Files Copy containers to email Management server storage Write to archive storage device on set schedule Archive Messages Compression Create container files Various Storage Options ediscovery searches Search and collect content in archive for discovery searches Put on legal hold 69
email Management should provide for: Seamless with email platform No change to the standard mail template Messages archived in their native format Transparent to the end user Works seamlessly with the native Outlook & Notes clients, support Web email Access Web search tool enables user self service and Single Sign-on Search tool easily integrated into the Outlook & Notes Clients Cost effectively store e-mail for long term retention Single Instance Storage Leverage tiered storage infrastructure Integrated with Records Management 70
email Management Benefits Modular Consistent Repeatable Flexible Modular approach Apply to unstructured content throughout the organization Identify risky and obsolete information in-place Make sound decisions and policies Repeatable solution for response and readiness Reduce review costs up to 90% Set retention across all content Reduce costs by 50% or more Makes archiving smarter 71
Pervasive Information Governance INFORMATION GOVERNANCE 72
It s a Balancing Act Tools approach Respond, defend, remediate High costs each time Project-based Platform approach Prevent, detect and deter Tangible ROI Process-based 73
Conclusions Imperative to pursue Pervasive Information Governance Retain with a purpose Plan for e-discovery Be Proactive rather than Reactive in the Management of your e-mail But don t forget the legacy e-mail out there Capture what is needed, disposed of the rest Retain emails and attachments together If necessary you can manage with different retention rules If managed separately, it will be a daunting task to reassemble 74
What about IM and Social Media? Keep that in the back of your mind as you are gathering requirements Don t obsess on it Need to walk before you run Most good email Management Solutions can also handle IM & Social Media 75
Recommendations Continue to educate yourself and your organization on the options and values of various email Management technology solutions Determine the best fit for your organization s culture Build a sound / defensible business case Collaborate when developing requirements 76
THANK YOU Tom Reding, CRM Principal, Information Governance tom.reding@emc.com 352-212-2430 77
Additional Resources: EMC Webcasts & Websites emc-compliance.com emc.com/informationgovernance http://www.emc.com/events/2011/q4/11-15-11-records-management-deployment.htm EMC Sponsored ARMA / Cohasset Records Management as well as AIIM Surveys http://www.emc.com/collateral/software/white-papers/cohasset-arma-2011-2012-survey-results.pdf http://www.emc.com/collateral/industry-overview/rm-strat-changes-2011-emc.pdf EMC Pervasive Governance Product Information emc-compliance.com http://www.emc.com/products/category/information-governance.htm http://www.emc.com/products/family/records-management-family.htm http://www.emc.com/products/detail/software2/records-manager.htm http://www.emc.com/products/detail/software2/retention-policy-services.htm It s Copyright posted 2013 on EMC the Corporation. Resource/More All rights reserved. Info sections of these pages on EMC.com: 78
Additional Resources: Presidential Memorandum Background: http://www.whitehouse.gov/the-press-office/2011/11/28/presidential-memorandum-managing-government-records http://www.whitehouse.gov/blog/2011/11/28/we-cant-wait-bringing-records-management-twenty-first-century http://aceds.org/obama-memorandum-to-spur-government-electronic-records-overhaul ARMA Webcasts http://www.arma.org/learningcenter/industryintel/pervasiveig/pervasiveinformationgovernance.htm http://www.youtube.com/watch?v=8t66-7gsd9e ARMA s GARP (Generally Accepted Record Principles), the GARP Maturity Model, GARP Health Checkup / Report Card http://www.arma.org/garp/metrics.cfm http://www.arma.org/garp/health.cfm EMC Webcasts & Websites emc-compliance.com emc.com/informationgovernance http://www.emc.com/events/2011/q4/11-15-11-records-management-deployment.htm 79