{"id":2074,"date":"2020-03-06T01:00:00","date_gmt":"2020-03-06T01:00:00","guid":{"rendered":"http:\/\/inswwdev.azurewebsites.net\/au\/insights\/uncategorized\/messaging-regulatory-compliance\/"},"modified":"2023-08-01T12:04:54","modified_gmt":"2023-08-01T12:04:54","slug":"messaging-regulatory-compliance","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/managed-services-for-partners\/messaging-regulatory-compliance\/","title":{"rendered":"Messaging Regulatory Compliance"},"content":{"rendered":"

What is regulatory compliance?<\/h3>\n

Every organisation is bound by applicable laws, policies and regulations. Failure to adhere to, or comply with, these could result in fines and prohibitions, in other words \u2018significant business impact<\/strong>\u2019. Regulatory compliance is simply unavoidable, and the best we can do is to stay compliant. Most messaging regulatory compliance laws require retention of emails, and below are a few examples of such regulation:<\/p>\n\n\n\n\n\n\n\n\n\n\n
Compliance Law<\/td>\nRegion<\/td>\nRetention<\/td>\n<\/tr>\n<\/thead>\n
Payment Card Industry \u2013 Data Security Standards<\/a> (PCI \u2013 DSS)<\/td>\nUnited States<\/td>\n1 year<\/td>\n<\/tr>\n
AICPA<\/a> \u2013 Generally Accepted Privacy Principles<\/a> (GAPP)<\/td>\nUnited States<\/td>\nRetain PII<\/a> until no longer required<\/td>\n<\/tr>\n
Australian Essential 8<\/a> (ACSC 8)<\/td>\nAustralia<\/td>\n3 months or more<\/td>\n<\/tr>\n
Data Protection Act<\/a> (DPA)<\/td>\nUnited Kingdom<\/td>\nRetain PII<\/a> until no longer required<\/td>\n<\/tr>\n
Sarbanes Oxley<\/a> (SOX)<\/td>\nUnited States<\/td>\n7 years<\/td>\n<\/tr>\n
Bundesdatenschutzgesetz<\/a> (BDSG)<\/td>\nGermany<\/td>\nRetain PII<\/a> until no longer required<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

While the above list is limited, there are innumerable laws which apply to industries in different regions. Moreover, businesses could be subject to compliance with multiple laws, which is certainly the case with multinational organisations.<\/p>\n

How should you choose a solution and retention strategy which addresses compliance, and caters to longer-term requirements? Here are a few pointers:<\/p>\n

1. Start by evaluating your compliance requirements<\/p>\n

2. Evaluate an appropriate email data governance solution. A few examples are below:<\/p>\n

a. Journaling<\/a> \u2013 A concept of storing a copy of every sent or received message<\/p>\n

b. Archiving<\/a> \u2013 This involves storing a copy of all messages on inexpensive storage and retaining the same for a predefined period. Examples include solutions like Veritas Enterprise Vault<\/a>, Mimecast<\/a>, Commvault<\/a><\/p>\n

c. Retention \u2013 This concept reduces the need to move data to a different location, but rather assigns a retention tag to the data at source. Examples include retention solutions for Microsoft Exchange<\/a>, O365<\/a>, Google Vault<\/a><\/p>\n

3. Consider an eDiscovery solution \u2013 Data must be produced anytime when requested. However, this is something many organisations do not plan for, thus facing huge eDiscovery costs coupled with fines. It is imperative you plan for this in advance, and preferably leverage an email retention solution which includes eDiscovery (at least as an available option). You may consider solutions from Veritas<\/a>, Proofpoint<\/a>, Barracuda<\/a>, Mimecast<\/a><\/p>\n

4. Reduce complexity \u2013 I have seen organisations rely on a combination of multiple solutions to address their retention and eDiscovery requirements. While this does address the problem, it adds a lot of management overhead and complexities. Hence, it is advisable to consider a wholistic solution which addresses all of these requirements. A few examples are O365 Compliance model<\/a>, Veritas Enterprise Vault Cloud<\/a>, Mimecast<\/a> etc.<\/p>\n

How can Insentra help with messaging regulatory compliance?<\/h3>\n

We are specialists in security solutions and our proven project methodology will help us (and you) understand your requirements better, thus mapping them with your long-term compliance goals. Please feel free to get in touch with Insentra to know more.<\/p>\n","protected":false},"excerpt":{"rendered":"

What is regulatory compliance? Every organisation is bound by applicable laws, policies and regulations. Failure to adhere to, or comply with, these could result in fines and prohibitions, in other words \u2018significant business impact\u2019. Regulatory compliance is simply unavoidable, and the best we can do is to stay compliant. Most messaging regulatory compliance laws require… Continue reading Messaging Regulatory Compliance<\/span><\/a><\/p>\n","protected":false},"author":9,"featured_media":2075,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[24],"tags":[],"class_list":["post-2074","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-managed-services-for-partners","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/2074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/comments?post=2074"}],"version-history":[{"count":1,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/2074\/revisions"}],"predecessor-version":[{"id":18809,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/2074\/revisions\/18809"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media\/2075"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media?parent=2074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/categories?post=2074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/tags?post=2074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}