Home > Information Security Magazine > Features > Security Learning its Role in E-Discovery
EMAIL THIS
Information Security Magazine

  CURRENT ISSUE  

  FEATURES  

  COLUMNS  

  HOT PICK & PRODUCT REVIEWS  

  ARCHIVES  

  SUBSCRIBE/RENEW  
 

Security Learning its Role in E-Discovery
by Trent Henry
Issue: Mar 2008
printer-friendly
< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   NEXT PAGE  >

  1. Believing data should be massively centralized in order to accommodate finding it. Although a reduction in the number of repositories and instances of products can be a boon, it's not feasible to create a "super-storage vault." Any sane response to e-discovery will necessarily involve multiple data sources and multiple technical approaches. Organizations will have to employ many different technologies to attack the problem, including search, mapping and categorization/classification. Clearly, reducing the number of deployments of, say, SAP from 20 to 10 can be beneficial. But for many organizations, simply knowing the location of relevant documents and records would be a step above their current situation.
  2. Thinking that most e-discovery problems relate strictly to email. This mistake can be blamed on misrepresentations by some vendors and media reports. While email is an important and often material piece of evidence in litigation, it's only one of a great many records that need to be found, preserved and presented. No enterprise is going to satisfy the e-discovery challenge simply by deploying an email archive and/or search tool. Proper management of email is necessary but not sufficient.


Haystacks and ...



Needles

If data is stored and used as part of the normal course of business, then it's expected to be discoverable. The court has little tolerance for a claim that the needle is too hard to find in the haystack.

Some of the data types are obvious, such as email messages or electronic business documents. But security teams are sometimes confused about sources like video or event logs (see "Evidence Sources," below). Ultimately, legal counsel needs to rule on information's applicability, but because many types of ESI are generated and stored for audit or security purposes, they are fair game in court. For example, a company may choose to utilize access control logs as its evidence of control for a regulation such as HIPAA. Because these logs are routinely stored and used for the business, they become part of the organization's e-discovery landscape.


Evidence Sources
Examples of various types of information and places they may be stored that are relevant ESI evidence sources in many large enterprise.
[IMAGE]



< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   NEXT PAGE  >





TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts