1. Presented by Chris Backo
Retention
Presented by Chris Backo

2. Background Information
We all know what is
retention is the process of saving s for future referral
Businesses often keep some important information stored
An example of this would be High School Transcripts were can be kept on file for years
This does not only apply to hardcopies of files, in this day and age important information is often sent electronically, as well.

3. Purpose
The Retention Policy is intended to help employees determine what information sent or received by should be retained and for how long.
This policy applies only to and instant messages.
All employees should be informed of this policy.

4. Scope
SANS.org recommends dividing and messages that contain business information into four categories:
Administrative Correspondence (4 years)
Fiscal Correspondence (4 years)
General Correspondence (1 year)
Ephemeral Correspondence (Retain until read, destroy)

5. Policy 1 - Administrative Correspondence 2 - Fiscal Correspondence
3 - General Correspondence
4 - Ephemeral Correspondence
5 - Instant Messenger Correspondence
6 - Encrypted Communications
7 - Recovering Deleted via Backup Media

6. Administrative Correspondence
4 years.
Established company policy
holidays, time card information, dress code, work place behavior, etc.
All correspondence which contains confidential or sensitive information should be retained.
They recommend setting up a specific mailbox for retaining these messages. Then, employees must only send a copy.

7. Fiscal Correspondence
4 years.
Fiscal Correspondence is all information related to revenue and expense. SANS.org recommends a similar procedure for retaining this information. Basically, set up an address and have employees send a copy.

8. General Correspondence
1 year.
General Correspondence covers information that relates to customer interaction and the operational decisions of the business. The individual employee is responsible for retention of General Correspondence.

9. Ephemeral Correspondence
Retain until it’s read.
personal , requests for recommendations or review, related to product development, updates, status reports, etc.

10. Instant Messenger Correspondence
Copy into a file and save:
sent to an if administrative or fiscal in nature
saved by employees if general correspondence

11. Encrypted Communications
They recommend using encrypted communications, and saving only low-level information in a decrypted format.
Basically, if it’s highly sensitive save in an encrypted form.

12. Recovering Deleted Email via Backup Media
They recommend backing-up files and storing them outside of the business.

13. Enforcement
Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.