Category Archives for Email Compliance

Email Compliance and the use of Email Filtering

Email compliance is a necessary corporate objective to ensure that email communication remains free of inappropriate materials that may damage or strain the relationships between your workforce.  Many managers see the protection against viruses, spyware and email spam as being the highest priority and they are there are a plethora of tools to enable companies to do this pretty well - as this is a mature market, but some organisations overlook content filtering.

Email filtering is a tool to allow both inbound and outbound emails to be scanned for abusive materials that are likely to break existing ‘Acceptable Use Policy’ statements and runs the risk of upsetting staff that read and are hurt or angered by the proliferation of such inappropriate content.

IT Managers have three solutions to implement email filtering: namely, a managed service where emails are scanned whilst travelling between the company and the internet; a server appliance, where emails are scanned within the company network and is automatically configured to run immediately; or a email server add-on program, which is installed, configured and manually maintained by the companies IT department and either installed on the email server or on another dedicated server .  All three solutions are viable for most modern organisations, but the managed service option has most effective content filter as its algorithm for detecting inappropriate content is constantly updated in line with real-time attacks that are happening over many of its own client base.  The effectiveness of the other two in-house solutions depend on the skills of the companies IT department and the email filtering vendors capacity to keep its scanning engine up to date with the latest rules to identify and stop the latest inappropriate content.

Email monitoring: the balancing act

The introduction of email has brought many benefits to organisations. One main benefit is having the capability to monitor email use by capturing communication metrics through which companies can then act in producing usage policies and provide education to try and reduce wasted resources and improve employee productivity. However, email monitoring also has complex ramifications on the organisation and on its workforce in terms of maintaining a balance between the protection of the employer and for its employees.

In other words, getting the right balance between allowing the organisation to continue business operations and not upsetting staff by invading their privacy rights or by using over-invasive monitoring methods that may affect staff morale and performance. Careful consideration and planning by both management and staff representatives is needed to evolve corporate policies to maintain this correct balance.

Key recommendations for Email Monitoring

Below is a list of 9 key recommendations for Email Monitoring:

1. Conduct an Impact Assessment to identify the business purpose for email monitoring and confine it to what is necessary to accomplish that purpose. Monitoring should only be used as necessary and not be intrusive on the employees’ email communication.

2. Develop, or modify, corporate policies that cover email use (such as the Acceptable Use Policy, Information Security Policy and/or Computer Use Policy). Make sure that all users accept these policies and they are documented.

3. Train users on current best practices of email management and use.

4. Allow management to appraise their staff regarding email use and what standards will be used to evaluate their performance.

5. Enforce and police all policies regarding email use at all times.

6. Consider which email monitoring tools are appropriate for the organisation. Only implement when supporting processes, procedures and resources are in place.

7. Frequently review and update corporate policies to ensure they fully comply with the law and regulations, and any changes thereafter.

8. Communicate any changes of policy to all email users and management.

9. Thoroughly consider the costs of excessive monitoring, such as ethics, low morale, high turnover, and potential lawsuits.


Other Recent Posts:

  1. Email Compliance and the use of Email Filtering - 31st Dec 2007
  2. Email spam - becoming sound practice! - 7th Nov 2007
  3. Email Security (Encryption) 2007 Review - 2nd Oct 2007
  4. Lost emails cause 5m hours of IT Management time - 25th Sep 2007
  5. Turning your email address into a phone call - 6th Sep 2007
  6. links for 2007-08-21 - 21st Aug 2007
  7. Sitemap - 21st Aug 2007
  8. Trend Micro joins the SaaS team for email protection - 14th Aug 2007
  9. E-mail stress keeps 1 in 3 workers on edge of Inbox - 13th Aug 2007
  10. links for 2007-08-07 - 7th Aug 2007
  11. links for 2007-07-31 - 1st Aug 2007
  12. links for 2007-07-27 - 27th Jul 2007
  13. Over 50% of UK business users are hooked on their inboxes - 24th Jul 2007
  14. Proofpoint - Outbound Email and Content Security 2007 Report - 24th Jul 2007
  15. Anti-spam products are failing users - 24th Jul 2007