Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Security Manager's Journal: When technologies collide

Mathias Thurman | Jan. 15, 2013
An encryption initiative runs into the law of unintended consequences, since the legal department can't search encrypted emails for e-discovery purposes.

Alternative Plans

But despite the awkwardness of the current predicament, I'm confident that we'll have things back on track soon enough. Right now, I'm looking at deploying an email gateway that would allow employees to place an email into a secure location to be accessed by customers and partners. Those emails would be encrypted only in transit and as they sit on the gateway awaiting retrieval. Once the email is downloaded, the encryption isn't persistent. Email retrieval is typically through a Web browser, so users will have to take an extra step. The aborted encryption program was more seamless, but this will at least give our employees a way to communicate securely with customers, partners and other third parties.

For the long term, I will begin to work with our vendor on options that will allow us to decrypt email before it's copied to the archive or enable searching through encrypted emails.


Previous Page  1  2 

Sign up for CIO Asia eNewsletters.