It's been over a decade since the first e-mail archive solution came to market. Over the past ten years, customers have utilized these purpose-built offerings to meet record retention compliance mandates, facilitate electronic discovery, and control message-related storage costs. Despite all of these benefits, many organizations still believe that enforcing mailbox quotas or message deletion policies (i.e. all messages older than 30 days are expunged) is the best way to manage messaging environments and if they do have to archive data, saving backup tapes seems to serve that purpose.
Published: February 27, 2009
It's been over a decade since the first e-mail archive solution came to market. Over the past ten years, customers have utilized these purpose-built offerings to meet record retention compliance mandates, facilitate electronic discovery, and control message-related storage costs. Despite all of these benefits, many organizations still believe that enforcing mailbox quotas or message deletion policies (i.e. all messages older than 30 days are expunged) is the best way to manage messaging environments and if they do have to archive data, saving backup tapes seems to serve that purpose.
In 2007, ESG research indicated that nearly two-thirds of companies had not purchased an e-mail archive solution[1] and while that number certainly decreased in 2008, plenty of companies still continue to manage and retain messages the 'old way'-by using quotas, deleting messages, and backup tapes. Many of the organizations that have yet to make an investment in e-mail archiving are medium-size businesses, which ESG defines as any organization with 100-999 employees.
Since they offer clearly demonstrable benefits, what could explain the lack of adoption of e-mail archive solutions amongst these companies? While the amount of IT infrastructure-including application servers and storage systems-needed to support implementation is one inhibitor, ESG research also reveals that it is a lack of skilled IT staff needed to run the e-mail archive environment that appears to be another predominant impediment for adoption. In a recent research study, ESG uncovered that nearly one-half of medium-size businesses reported that they were either short staffed or needed staff augmentation for proper e-mail administration.[2] If a majority of organizations do not have the resources to run their primary e-mail environments, it is unlikely they will be able to add archiving. Some may argue that the lack of staff would lead to outsourcing the primary e-mail environment; however, many medium-size businesses want to retain control over collaboration and messaging applications to mitigate security and privacy concerns. Thus, they choose to allocate what IT resources they have to the primary environment, which does not leave additional funds to run peripheral solutions like archiving.
Over 500,000 medium-size businesses operate worldwide-many of which are subject to record retention regulations.[3] Thirty-six percent of these organizations experienced an electronic discovery request in 2007[4]-a number that likely increased in 2008 due to the ongoing financial crisis and continued executive malfeasance. But the figure that should most compel medium-size business to evaluate an archiving solution is related to e-mail, which, excluding attachments, accounts for over 20% of corporate data and consumes costly storage and data protection resources.[5]
Connecting all the data points leads ESG to believe that medium-size businesses will soon realize that old methods of message management will not be able to support the data growth and information retention requirements, forcing this profile of company to turn to e-mail archive solutions. However, with many medium-size businesses insufficiently staffed to run their primary messaging environments, many are likely to select e-mail archive solutions delivered via Software as a Service (SaaS). SaaS-based offerings allow customers to retain messages without having to implement and run the actual archive software or any of the associated IT infrastructure (servers, storage, etc.). With SaaS, there is no incremental operational burden on IT staffs as they simply need to determine which mailboxes will be archived and what the retention and access policies are-the SaaS provider handles the rest.
One of the biggest myths surrounding the e-mail archive market is that the solutions are only suited for large Wall Street firms that must adhere to strict record retention regulations. While it is true that the Securities and Exchange Commission fined several broker/dealers in 2002 because they failed to retain e-mail in accordance with SEC Rules 17a-3 & 4,[6] the penalties made it clear that messages and attachments should be considered business records and subject to record retention regulations. For example, if a doctor issues medical instructions over e-mail to a patient, the message can be considered a medical record and be subject to HIPAA requirements in the United States, which mandate that this information be retained for the life of the patient. But similar rules are also being established in countries across the globe: New South Wales, Australia has recently adopted a digital records preservation policy, inclusive of e-mails, that government agencies must adhere to.[7]
In addition to financial services, healthcare, and government markets, several other industries-including education, legal (law firms), energy, and telecommunications-are regulated by record retention laws that could pertain to e-mail. The rules apply to any company, regardless of how much revenue it generates or how many employees it has. If a medium-size business does not believe it needs to retain e-mail for regulatory reasons, it may choose to implement an electronic records management program for corporate governance purposes. Both publicly traded and privately held medium-size businesses have received board-level instructions to improve corporate governance policies as a means of protecting shareholders and stakeholders. These policies often include the retention of e-mails between executives and board members, senior staff hiring and compensation discussions, and sales contracts for audit purposes, as well as other vital content.
Regardless of the drivers behind an e-mail retention program, businesses need to save more messages for longer periods of time. An e-mail archive solution allows companies to establish retention periods on individual e-mails or a group of messages so only the right data is kept for the appropriate period of time. An e-mail archive solution also makes the data more accessible as it builds a searchable index while capturing messages and, more importantly, customers can control storage costs by deploying lower cost systems (on-premise archive solution) or save the data offsite for a fixed fee (SaaS-based archive solution). This allows companies to balance accessibility requirements with storage costs.
ESG research estimates that approximately 80% of electronic discovery events involve e-mails and attachments (see Figure 1). This number is unlikely to subside given the 2006 amendments to the U.S. Federal Rules of Civil Procedure, which incorporated several mandates surrounding the identification, collection, and production of electronically stored information (ESI).
With more and more business being transacted digitally, regulators and litigators are targeting messages-both recently created and historical e-mails-as prime sources of evidence. Employees often say anything over e-mail, which can frequently provide attorneys and investigators with insight regarding 'who knew what' and 'when they knew it.'
As a result of the FRCP amendments, e-mail has become a common source of evidence, which forces in-house counsel (or external counsel if a company does not have a large internal legal staff) and IT to constantly search for relevant messages. The FRCP also established aggressive timelines that attorneys must adhere to when going through the electronic discovery process. From the point that they receive a discovery notice, attorneys may have as little as 30 days to prepare for a Meet & Confer session with opposing counsel.[8] Per the FRCP, attorneys must disclose: "a copy-or a description by category and location-of all documents, electronically stored information, and tangible things that the disclosing party has in its possession, custody, or control and may use to support its claims or defenses, unless the use would be solely for impeachment." [9] Within 14 days of the Meet & Confer, the parties must submit a discovery plan to the court.[10] Finally, after receiving a formal discovery request in writing by the opposing party, an organization must respond within thirty days.[11] A judge may ultimately expand the timeline of Meet & Confer sessions, along with ESI production deadlines, via a scheduling order. However, organizations must always be prepared for tight timelines when it comes to managing ESI, of which e-mail is a subset.
Medium-size businesses are not exempt from electronic discovery or tight timelines-they can expedite the process by centralizing all e-mails in a searchable archive. Corporate counsels can query the archive based on terms outlined in a discovery request, which can help locate the proverbial 'needle in the haystack' prior to a Meet & Confer session with opposing counsel. Currently, corporate and external counsel have to sift through primary message servers, tape backups, and PCs (personal mail archives) in the hopes of finding relevant content-a process that is, to say the least, very time consuming and costly. As an example, restoring and indexing a backup tape so it can be searched can cost between $500 and $2000 per tape, depending on the size and the data format. This is a very expensive endeavor to go through each time a discovery request involving e-mail arrives.
Medium-size businesses can also reduce the number of e-mails that are discoverable by enforcing retention policies. If an organization does need to put messages on legal hold because they are relevant to a legal matter, an e-mail archive solution can execute preservation requirements-a capability that many medium-size businesses do not have-by enforcing retention policies that prevent the modification or deletion of designated messages. ESI preservation is a critical phase of the electronic discovery process as it helps maintain the integrity and authenticity of the content, including e-mails. Attorneys do not want to build their cases around a subset of messages only to have opposing counsel easily refute the e-mails' viability because they were not properly preserved.
E-mail archive solutions can have an immediate impact on a medium-size business's storage environments because they copy messages from a primary environment to the secondary archiving environment. Some solutions copy the messages and then leave a stub in the primary e-mail application, ensuring accessibility while still relocating messages to lower cost storage. As a result, customers free up primary storage for newer content and, with less primary storage to protect, backups and restores complete faster.
In SaaS implementations, customers can retain old messages for longer periods of time without having to deploy or manage the infrastructure. Archive storage costs may also be mitigated if the SaaS provider offers unlimited archive storage for a monthly fixed fee.
Many customers believe that existing e-mail management methods address emerging challenges such as electronic discovery, compliance and growing storage costs. However, there are significant drawbacks to mailbox quotas, using backups for corporate archives, and storing archived data on tapes.
Quotas prevent individual mailboxes from growing beyond a certain capacity threshold; however, they also require employees to delete messages or create personal archives. Employees that fail to maintain compliance with a quota may be prohibited from sending or receiving messages. Regardless of how they are implemented, quotas negatively impact employee productivity as individuals spend more time managing their inboxes, may not have access to old messages, and worse, may not be not be able use e-mail altogether. Further, if corporate counsels need to locate relevant e-mail in an organization that uses mailbox quotas, they have to locate all personal archives-a task that is extremely time consuming. E-mail archive solutions allow customers to enforce quotas but instead of deleting messages, the solution centralizes all messages and moves them to a lower cost environment.
The other trap that organizations fall into is saving backups for long periods of time and calling this collection of data an archive. Backups are copies of primary data taken at a point in time for use if information is deleted or corrupted. Typically, the data format is altered during the backup process to expedite copying and movement of large data sets to secondary, less expensive storage media. Archiving also moves or copies data to a less expensive storage environment, but the data is indexed (backups create a catalog, not an index) before it is stored in native file format. This enables swift access to archived content as employees, corporate counsel, and compliance officers can query large repositories and retrieve a message or attachment quickly. Archive solutions can assign metadata (information about data), including a retention period or a category tag (for example, attorney/client privilege) to e-mails. Companies that need to access messages-both old and new-regularly should leverage archiving. Backups are used to protect against data loss; they are not for recurring access.
Where medium-size businesses actually store their archived data should also be considered. Because archiving has traditionally been a part of the backup process, most data is saved on tape. Tape is adequate media for saving backups; however, there are issues with it being used for storing archives because:
As a result of some of these issues, ESG encourages medium-size businesses to leverage disk to support an e-mail archive. The price of disk continues to decrease, especially with the introduction of large capacity ATA-based drives. If the price of disk, however, is still a concern, customers can avoid buying disk altogether by going with a SaaS-based archive solution.
When a medium-size business realizes that old archive methods do not help address today's message management challenges, they can choose from three different solution options:
Given that e-mail archive appliances are best suited for smaller organizations (under 100 mailboxes), most medium-size businesses will contrast the on-premise versus the SaaS-based options. Key criteria for the comparison should include:
SaaS-based e-mail archive offerings take the form of two primary implementations in the marketplace. The first type of solution simply requires customers to send a copy of all messages (both sent and received) to an e-mail archive SaaS service provider. Customers configure this by journaling messages, setting up a MX record redirect, or log shipping content to the service provider-the method depends on the e-mail application and how the SaaS provider receives information. Once the service provider receives the messages and attachments, it indexes the data, assigns a retention period based on policies predefined by the customer, and stores the information within its data center. To search and retrieve messages, customers can log into a secure website managed by the SaaS provider or utilize a client-side message application plug-in.
The second type of SaaS e-mail archive offering still requires customers to copy messages by journaling, an MX record redirect, or log shipping. However, a lightweight agent is also installed on the primary messaging environment. This software determines what content needs to be archived based on customer policies and then utilizes the aforementioned data movement methods to copy this data to the SaaS provider, where it is indexed and stored. The biggest difference between this implementation and the first alternative is that the messages and attachments are moved from the primary e-mail environment and replaced with a link or stub by the software running in the primary environment. When customers want to access the content, they simply click the link or stub in their primary e-mail client. Service providers that offer this style of implementation also typically provide access via a secure web interface along with the stubs.
With either option, customers are responsible for determining retention polices-how long messages are to be saved-and the retention periods are enforced by the archive. When accessing messages in the archive, customers can search for specific e-mails, copy them back into the primary environment, or work with them (read, send, forward, reply, etc.) in the archive. Typically, the SaaS-based archive solution allows customers to configure hierarchical user access permissions within the web interface, so employees are limited to seeing and working with their messages while compliance officers and corporate counsels may be able to search the entire archive.
SaaS-based solutions offer several benefits that manifest in operational and capital cost savings as well the opportunities that arise because vital business data is being saved offsite. Some of the advantages are:
If a medium-size business determines that it wants to move forward with a SaaS-based e-mail archive purchase, customers can use the following criteria to help differentiate current SaaS-based offerings (in no particular order):
Any IT investment, especially in a challenging economic climate, must have a calculable Return on Investment (ROI) and customers should put measurements in place to determine the success or failure of their implementations. E-mail archive solutions, regardless of whether they are offered via SaaS or on-premise, should not be any different. The following are a few key metrics which allow IT to measure their impact:
For those organizations that have already implemented an e-mail archive solution, the plethora of benefits experienced (see Figure 2) should serve as the catalyst for every company, including medium-size businesses, to, at a minimum, evaluate similar offerings. However, it is understandable that organizations in this category, with already strained IT staffs, do not want to add another piece of technology—one that must be managed—to their infrastructure.
But, it is just as unlikely that e-mail usage, regulations, and electronic discovery will decrease any time soon. Medium-size businesses must figure out how to save e-mails for longer periods of time without depleting their IT staffs and capital budgets. And maintaining existing management methods via quotas and backup tapes is starting to be very expensive in terms of employee productivity as well as legal and compliance risk due to the inaccessibility of the data.
SaaS-based e-mail archive offerings are an ideal means for medium-size businesses to reap the benefits of e-mail archiving without the initial upfront investment or ongoing operational requirements of on-premise alternatives. This is not a new concept: 34% of respondents to an ESG survey of medium-size businesses users are already using storage-related (backup, disaster recovery, etc.) SaaS offerings[12]and many other companies utilize other message management (Antivirus/Anti-Spam, etc.) SaaS solutions. With SaaS-based e-mail archiving, companies do not have to over commit capital or resources and can ‘test services’ by only signing up for an annual contract.
ESG has witnessed on-premise e-mail archive solutions simplify architectures for streamlined management. We have also seen an increase in the number of integrated e-mail archive appliances, which combine the software, application server, and storage into a prepackaged solution available in the market. While these alternatives make it easier to run an on-premise solution, they still require some upfront capital investment and IT resources to maintain them. SaaS-based e-mail archive solutions are designed to be even simpler than these new and improved on-premise alternatives, making it very simple for medium-sized business to more effectively retain messages at lower costs for longer periods of time. With a scarce up-front investment and minimal drag on IT staff, SaaS solutions are also risk-adverse investments—the types that are desperately needed in today’s difficult economic times.
[1] Source: ESG Research Report, 2007 E-mail Archiving Survey, November 2007.
[2] Source: ESG Research Report, Medium-Size Business Server & Storage Priorities, June 2008.
[3] Various Sources: OECD Science, Technology, and Industry Scoreboard 2005, UNCTAD e-business database 2005, UNCTAD E-Commerce & Development Report 2004, UNCTAD Information Economy Report 2005, and ESG estimates.
[4] Source: ESG Research Report, Electronic Discovery Requirements Escalate, November 2007.
[5] Source: ESG Research Report, Medium-Size Business Server & Storage Priorities, June 2008.
[6] Source: http://www.sec.gov/news/press/2002-173.htm
[7] Source: http://www.records.nsw.gov.au/recordkeeping/
[8] Federal Rules of Civil Procedure, Rule 26(f)(1), December 2007.
[9] Ibid, Rule 26(a)(1)(A)(ii), December 2007.
[10] Ibid, Rule 26(f), December 2007.
[11] Ibid, Rule 34(b(2)(A), December 2007.
[12] Source: ESG Research Report, Medium-Size Business Server & Storage Priorities, June 2008.
Browse by Content Type
Categories
Share