Three vital e-discovery security issues

It is time the UK's information security professionals got to grips with the role they play in e-discovery projects, the process of locating and providing current and stored electronic records for regulatory compliance and civil or criminal litigation.

That's the message from Mike Lynch, CEO of search company Autonomy. Right now, he says, only a small minority are up to speed, typically those who work for organisations in highly litigious industries (such as pharmaceuticals and financial services) or at companies with operations in the US, where they are subject to that nation's stringent Federal Rules of Civil Procedure (FRCP). But the majority of security professionals still have much to learn about e-discovery, according to Lynch.

1.) Lack of awareness
2.) Secure as standard
3.) Legal ramifications

Lack of awareness

"I see a wide lack of awareness among IT security staff that e-discovery needs to be a factor in every architectural decision they make. The problem, as I see it, is that much of what defines an e-discovery project - making vast amounts of information available at speed - would appear to fly in the face of what information security professionals are trying to achieve on a day-to-day basis; that is, keeping information safely locked away."

As a market leader in the e-discovery tools space, Autonomy has a clear commercial impetus for alerting as wide a community as possible to the importance of e-discovery preparations. But even more impartial industry watchers echo Lynch's view that any e-discovery implementation has major implications for the IT security team.

To Continue Reading: Click Here
------------------------------------------------------
Source: computerweekly.com
By: Jessica Twentyman