The Sarbanes-Oxley Act Has Forced Many Companies To Review Email Retention Policies.

Four years have passed since President Bush signed the Sarbanes-Oxley Act and most analysts agree the law is working as larger companies are finally getting their accounting books in order.

The act was formulated to strengthen accounting oversight and corporate accountability. It did this by increasing accounting and auditor regulations, enhancing disclosure requirements, creating new federal laws and increasing penalties under existing federal laws.

An important aspect of the act focuses on the details of data security, retention and protection. So the question is, how does the Sarbanes-Oxley legislation impact email retention policies?

Surveys indicate that 93 percent of all business documents are created electronically and that has forced most corporations to address their retention policies. Businesses, small or large, can no longer consider email retention a non-priority.

Companies must develop a classification of data for off-site storage, such as an online storage service that encrypts and protect the data.

The Sarbanes-Oxley Act includes three provisions that deal with electronic documents, such as those communicated through emails. They include document alteration or destruction, mandatory document retention and obstruction of justice.

* In terms of document alteration or destruction, the Sarbanes-Oxley law states that people who knowingly alter, destroy, mutilate, falsify or conceal any document (electronic or paper) with the intent to impede proceedings involving federal agencies may be fined or imprisoned up to 20 years, or both. How does this impact email retention policies? If a company has an email retention policy in place, it must include a security plan. Only certain individuals should be given clearance to access the archived emails. A report with that person's name and purpose should be produced every time a certain email is accessed, and documentation of change to the existing document should be noted.

* The Sarbanes-Oxley provision of mandatory document retention forces businesses to keep records readily for review for a period of up to five years. The penalty for knowingly and willfully violating this provision imposes fines and a maximum sentence of 10 years in prison, or both. How does this impact email retention policies? A business must generate a data-retention policy with archive history periods included. According to Sarbanes-Oxley, the time period for such retention should be at least five years. The emails should be classified by dates (months and years) to make it less complicated for auditors to access such information. If the emails are disorganized, the auditors may have to dig deeper and they might find improprieties.

* The obstruction of justice segment is similar to the document alteration provision under the Sarbanes-Oxley Act, but it includes a statute that prohibits tampering with witnesses. The legislation states that acting or attempting to alter or destroy a record or other object "with the intent to impair the object's integrity or availability for use in an official proceeding" can be punishable with fines, imprisonment for up to 20 years, or both. How does this impact email retention policies? Again, any company that has a data retention policy must enforce a security plan such that data can be accessed by only the proper personnel. An online data backup service with strong encryption and user tracking helps eliminate the chance of human intervention with whatever email data has been stored. With certain managed backup services, online backups are performed automatically, so data is protected without manual intervention. Data moves through an existing network connection, using state-of-the-art data security including AES encryption to a secure remote data center.

Clearly, the document-retention regulations implemented by the Sarbanes-Oxley legislation sends a signal to businesses that they must institute a policy regarding their data and documents, including those transmitted through email. Businesses must realize that they can be held liable for retained and deleted electronic documents. The policies these businesses put in place should include an inventory of all the electronic hardware and software that can store emails (including cell phones and laptops), all locations and storage formats of archived emails, and all the methods that email documents can be transferred into and out of the company. The next step should include classification of such emails, and then a secure off-site online backup storage plan.

The days of simply keeping emails in a folder at each workstation are part of the past thanks to businesses that have put forth a solid data retention plan. The Sarbanes-Oxley Act has served as an effective means to help push the creation of such plans.

Data Disaster Recovery - Is It Really Necessary?

When people think of disasters, they mainly think of flooding or earthquakes. In the world of computer experts or people who makes their living using information technology, a disaster can be quite different and yet can have the same paralyzing effects. Like an aftershock to a major earthquake, losing one's data suddenly and without warning can leave many a computer technicians as well as users shocked and in awe. Never panic though, because disaster data recovery is a possibility and all that was once lost might be found with a high degree of reliability and an even higher percentage of probable retrieval.

Fire and flooding damage to a home can result in a complete mess. Most people might feel "ruined" because of the extreme equipment casualty that can be done to a home. Once it is established that there is no harm to any of the humans or pets in a building or office building, the healing of the equipment through disaster data recovery is ready to begin. A team of reliable computer technicians or experts is called in to begin work on your computer equipment or any other piece of equipment that was damaged by the fire.

Data backup and recovery is always precious. Many of the techniques the team of experts will use on the equipment are the same as the techniques used to rescue lost data from other machines under more normal circumstances, for example retrieving lost files from a damaged hard drive through a fire is much the same as simple finding lost files from a hard drive with a virus or other sort of infirmity. The important thing to keep in mind is that nobody gets hurt in the process of disaster data recovery.

Dangers from earthquake and fire

In more than one case, companies or individuals that lose important data to a fire or earthquake face a time of uncertainty that is unrivaled in the world of business conflicts and personal negativity. The pits of despair are now too familiar a home for those that have lost crucial pieces of data or information because of a strong type of calamity. Disaster data recovery can not only serve to restore the data to its original form but it can also restore relationships between them and, perhaps more profoundly, the human heart.

Data recovery experts are specialized in multiple areas of recovering data including, but not limited to: fire recovery, water damage recovery, and miscellaneous crash recovery that may have occurred with an act involving a sledgehammer and a frustrated information technology worker on his last day of work when the coffee was cold and the air conditioning was broken. Disaster data recovery will always have a place in the annals of office and/or personal lives and this author cannot be more grateful.