Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Better together: Enterprise Vault.cloud and Microsoft Office 365
1. Better Together –
Symantec Enterprise Vault.cloud &
Microsoft Office 365
Enterprise Vault.cloud & Office 365 – Better Together 1
2. Agenda
2
1 About Microsoft Office 365
2 The Enterprise Vault.cloud Value-Add
3 Enterprise Vault.cloud Demo
4 Questions
Enterprise Vault.cloud & Office 365 – Better Together
3. What is Microsoft Office 365?
Communications and collaboration cloud-based services
Enterprise Vault.cloud & Office 365 – Better Together 3
4. Archiving & eDiscovery in Office 365
• Provides end users with an In-Place Archive – secondary
mailbox in Outlook/OWA for storing older messages
– Unlimited archive storage* (100 GB default quota)
– Users can delete and modify messages in their In-Place Archive
• In-Place Hold capabilities* for preserving content
• In-Place eDiscovery and Hold Wizard in Exchange – to discover
and preserve Exchange Online 2013 and Lync Online 2013
content
• eDiscovery Center* in SharePoint – to discover, preserve, and
export SharePoint Online 2013, Exchange Online 2013, and Lync
Online 2013 content
*Premium feature only available in the more expensive Office 365 plans
4
Enterprise Vault.cloud & Office 365 – Better Together
5. What is Symantec Enterprise Vault.cloud?
Leading cloud-based archiving service
Enterprise Vault.cloud
Email Storage Management
Email eDiscovery
Email Compliance
Purely cloud-based
• No hardware or software to install and maintain
• Low upfront investment & TCO
• Per mailbox, per month fee
Unlimited storage & rapid search
• Unlimited email storage and retention
• Rapid search results from scalable grid architecture
• No mailbox size limits for end users
Enterprise-class infrastructure & security
• Redundant, scalable, Tier 4 data centers
• Data encrypted in transit & at rest
• 24/7/365 customer support included in cost of service
Enterprise Vault.cloud & Office 365 – Better Together
6. Symantec is archiving
6
• 25,000 customers
– 57 of the Fortune 100
– From small businesses to
100,000+ users
• Gartner Magic Quadrant
leader for 9 years running
• Customer-centric roadmap
• Award-winning support
“Symantec's vision for Enterprise Information Archiving encompasses a focus on scalability, intelligence
and support for multiple content types.” - Gartner
Enterprise Vault.cloud & Office 365 – Better Together
Source: Gartner, Inc., Magic Quadrant for Enterprise Information Archiving,
Sheila Childs, Kenneth Chin, Alan Dayley, Debra Logan, December 2012
7. Office 365 &
Enterprise Vault.cloud –
better together
How Enterprise Vault.cloud adds value to
your Office 365 deployment
7
Enterprise Vault.cloud & Office 365 – Better Together
8. Scenario 1:
You are in a contract dispute with one of
your suppliers. You need to locate an
amendment to the original contract that
was agreed via email
8
Enterprise Vault.cloud & Office 365 – Better Together
9. Scenario 1
Using Enterprise Vault.cloud
• Uses journaling to automatically capture an immutable copy of
all messages sent and received in a centralized and searchable
cloud-based archive that’s kept separate from end user action
• Journaling is the only way to ensures full message capture for
compliance and eDiscovery purposes
• Captures original message plus information about the sender
and all recipients, inc. BCC and Distribution List recipients
• Authorized users can search the archive and quickly locate the
information required to solve the contract dispute
Net result: If the email once existed, you’ll be able to find it
9
Enterprise Vault.cloud & Office 365 – Better Together
10. Scenario 1
Using Office 365
• No defensible way to capture all email:
– Users can delete and modify messages in their In-Place
Archives
– You must manually apply deleted item retention policies
and/or legal holds to preserve messages
– BCC and Distribution List recipients not captured – can’t
accurately determine who received the email
Net result: If the email has been deleted, you may not be able to
find it
10
Enterprise Vault.cloud & Office 365 – Better Together
11. Scenario 2:
IT is spending too much time running
eDiscovery searches and placing data on
legal hold. You want to remove the
eDiscovery burden from IT
Enterprise Vault.cloud & Office 365 – Better Together 11
12. Scenario 2
Using Enterprise Vault.cloud
• Single, easy-to-use interface for managing eDiscovery cases
• Enables legal, HR, and compliance teams to take complete
ownership of the eDiscovery process – no help from IT required
– Direct, role-based access to archive with collaborative review
– Search across an unlimited number of users
– Apply a legal hold to an unlimited number of users
– Perform self-service exports of archived content
– Web-based access for outside counsel
Net result: Completely removes the eDiscovery burden from IT
Enterprise Vault.cloud & Office 365 – Better Together 12
13. Scenario 2
Using Office 365
• Offers 2 tools for enabling non-IT staff to perform eDiscovery-
related tasks:
1. In-Place eDiscovery & Hold Wizard in Exchange Online
2. eDiscovery Center in SharePoint Online
Both have limitations that can ultimately lead to IT help being
required. E.g.:
– Can only apply a legal hold to a maximum of 50 mailboxes in a
single search
– Can only run search queries across a maximum of 1,500 mailboxes
Net result: Puts the eDiscovery burden on IT and can lead to IT
staff being subpoenaed to appear in court to give evidence
Enterprise Vault.cloud & Office 365 – Better Together 13
14. Scenario 3:
You find you have a large amount of data
to search through in relation to a specific
case brought against your company
14
Enterprise Vault.cloud & Office 365 – Better Together
15. Scenario 3
Using Enterprise Vault.cloud
• Real-time, search-within-search functionality
• Built-in collaborative review capabilities
– Divide search results amongst multiple reviewers to share the
workload
– Apply review statuses or labels to items
– Tag content as relevant, irrelevant, spam, personal, privileged, etc
– Add notes that can be reviewed by others working on the case
• Easily export content to the Symantec eDiscovery Platform
(Clearwell) for further analysis, review and production
Net result: Quickly identify the information you need to help
defend your case
15
Enterprise Vault.cloud & Office 365 – Better Together
16. Scenario 3
Using Office 365
• No search-within-search functionality (form-based search only)
• Search results are copied to a discovery mailbox, and reviewed
in Outlook or OWA
• Outlook and OWA do not provide a comprehensive review
platform
Net result: You may have to pay significant and unforeseen legal
fees in order to further refine and identify potential evidence
16
Enterprise Vault.cloud & Office 365 – Better Together
17. Scenario 4:
An end user needs to quickly find and
restore an email they deleted six
months ago
17
Enterprise Vault.cloud & Office 365 – Better Together
18. Scenario 4
Using Enterprise Vault.cloud
• Easy access to archived information – including every email ever
sent and received – directly from Outlook, Notes, or Web
browser
• Advanced search filters quickly narrow down search results
• Restore any lost or deleted message from any date range – with
no help from IT required
Net result: The end user can quickly find and restore the deleted
message
18
Enterprise Vault.cloud & Office 365 – Better Together
19. Scenario 4
Using Office 365
• 2 mailboxes for the end user to manage (primary mailbox and
In-Place Archive)
• No search refinement options – users must go back and re-run
form-based searches until they find the message they need
• Deleted messages can only be recovered by the user within the
maximum 30 day retention period for deleted items
Net result: Slow searches, and the deleted email may not be
recoverable
19
Enterprise Vault.cloud & Office 365 – Better Together
20. Key Enterprise Vault.cloud advantages over Office 365
Helps satisfy compliance requirements to retain
electronic information and ensure its integrity
Archives multiple email platforms and other electronic
data in a single, searchable repository
Removes the eDiscovery burden from IT
Accelerates the eDiscovery search and review process
Makes it easier for end users to locate and restore
messages from any date range
Enterprise Vault.cloud & Office 365 – Better Together 20
21. Act Now: Archive First Before Migrating to Office 365
Enterprise Vault.cloud & Office 365 – Better Together 21
Mail server
Existing archive
Archive
PSTs Legacy
data
PSTs
Legacy
data
Office 365
Local pst Network pst
22. Unparalleled Office 365 integration
Enterprise Vault.cloud & Office 365 – Better Together 22
Active Directory Synchronization
Single Sign On
24. Learn More Today!
• Visit go.symantec.com/evc for specific information about
Enterprise Vault.cloud
• Visit go.symantec.com/office-365-archiving to download the
Osterman Research White Paper “The Need for Third Party
Security, Compliance and Other Capabilities in Microsoft Office
365”
• Follow @enterprisevault
Enterprise Vault.cloud & Office 365 – Better Together 24
28. Why Enterprise Vault.cloud?
28
• Unlimited storage and retention
• Eliminate free-range PSTs/NSFs
• Improved server performance
and reduced backup windows
• No mandatory hardware or
software
• Quick and easy to deploy
• Predictable monthly fee
• Scalable grid architecture
• Security in-depth model
• Private multi-tenant data
centers
• 24/7/365 support
• Define and enforce retention
policies
• Rapid search results
• Roles-based access for Legal
• Flexible online export options
Better store, manage and discover business critical information in the cloud
• Access from email client or web
browser
• Quickly locate information
using search filters
• Perform self-service restores
Offers enterprise-class
infrastructure and security
Provides an intuitive end
user experience
Improves storage
management
Delivers cloud-based
archiving
Accelerates the eDiscovery
process
Enterprise Vault.cloud & Office 365 – Better Together
30. Administration Tools
Provides directory synchronization
services
Allows administrators to create and
deploy personal archive folders in
Microsoft Outlook and IBM Notes
Enterprise Vault.cloud easy set up: measured in days
30
Create a
journaling
contact
Create an SMTP
send connector
Activate
journaling
1
2
3
Enterprise Vault.cloud & Office 365 – Better Together
31. Enterprise Vault.cloud global footprint
Data centers & localization
31
>99.99%
Proven reliability N+1 Architecture
Real-Time
Monitoring
Enterprise Vault.cloud & Office 365 – Better Together
32. 32
Physical Administrative
Technical
Infrastructure security
•Redundant firewalls
•Redundant load balancers
•Minimum system baselines
Application security
•Roles-based access control
•Trusted Network authentication
•Audit history
Data security
•Encryption in transit (TLS)
•Encryption at rest (AES)
•Encryption of credentials
Data Center security
•SSAE 16/ISAE 3402 Type II
•Tier-4 data centers
•Tier-1 networks
Data redundancy security
•Power, cooling, network
•Geographically-dispersed
•Data replication
Site security
•Biometric access control
•Security surveillance/CCTV
•24x7 guard service
Personal security
•Employee screening
•Confidentiality NDAs
•Ongoing certifications
Process security
•Change management
•Access management
•Uptime monitoring
System security
•Intrusion detection (IDS)
•SYMC, MSS, SEP Altiris
•Qualys vulnerability tests
Enterprise Vault.cloud & Office 365 – Better Together
Enterprise Vault.cloud enterprise-grade security
34. Enterprise Vault.cloud file and social media archiving
• Supported platforms:
– Microsoft SharePoint 2003, 2007, 2010 (on-premise)
– Box
– Salesforce Chatter
• Captured into a single archive alongside email
• Files and Chatter posts appear in search results
• Files and Chatter posts can be preserved using:
– Legal hold
– Default retention policy
– Group-based retention
– Granular tag-based retention
34
Additional fee applies
Enterprise Vault.cloud & Office 365 – Better Together
35. Enterprise Vault Personal.cloud
35
• Unlimited mailbox, directly accessible
from Outlook
• Quickly drill-down on search results
• Self-service restoration of old or lost
emails
Enterprise Vault.cloud & Office 365 – Better Together
36. Enterprise Vault Discovery.cloud
36
• Accelerate legal discovery and
internal investigations
• Roles-based access with
collaborative review
• Search across an unlimited
number of users with iterative
search functionality
• Web-based access for outside
counsel
Enterprise Vault.cloud & Office 365 – Better Together
38. Enterprise Vault.cloud + Clearwell: a closer look
Information
Management
Identification
Preservation
Collection
Processing
Review
Analysis
Production
The Electronic Discovery Reference Model (EDRM)
Symantec eDiscovery Platform
Enterprise Vault.cloud
• Capture emails, files, & social media comms
• Access messages via smart phone or tablet
• Set/enforce retention policies and apply
legal holds
• Ingest all .pst files (mailbox management)
• Unlimited storage and retention
• Legal hold notification workflow
• Collection from active sources outside of
Enterprise Vault.cloud
• Advanced analytics and concept search
• Full review with redaction and production
• End-to-end tracking and reporting
38
Enterprise Vault.cloud & Office 365 – Better Together
39. Enterprise Vault Enhanced.cloud
Enterprise Vault.cloud
Current product offerings
39
Enterprise
Vault
Personal
.cloud
Enterprise
Vault
Discovery
.cloud
Enterprise
Vault
Mailbox
Continuity
.cloud
Symantec
AdvisorMail
Add-ons:
Bloomberg Option
Reuters Option
IM Option
Social Media Option
Add-ons:
Folder Synchronization Option
BlackBerry Option
SharePoint Option
Salesforce Chatter Option
Box (File Archive) Option
Editor's Notes
Office 365 is a collection of cloud-based communications and collaboration services, including: Exchange Online—an email, calendar, and contacts solutionSharePoint Online—a document sharing and editing serviceLync Online—which provides instant messaging and other toolsWeb-based versions of Microsoft’s desktop productivity applications It’s offered in a large number of subscription plans at price points ranging from free to over $22 per user, per month.
Depending on the subscription plan, Office 365 can include some built-in archiving and eDiscovery features. In terms of archiving, Microsoft’s approach is to provide Exchange Online users with an In-Place Archive – secondary mailbox that appears alongside a user’s primary mailbox in Outlook or OWA (Outlook Web App), and gives them a place to store older emails. The cheaper Office 365 plans provide users with 25 GBs of storage, which can be split between their primary mailbox and In-Place Archive. The more expensive E3 and E4 plans provide users with 25 GBs of storage in their primary mailbox, plus unlimited storage in their In-Place Archive. It’s important to note that users can modify or delete items from their In-Place Archives just as they can with their primary mailboxes. In order to prevent users from deleting or modifying messages, Microsoft suggests the use of its In-Place Hold functionality (legal hold). If a user deletes or modifies a mailbox item that is on In-Place Hold, the original email is preserved in the users’ Recoverable Items folder – a hidden folder in their primary mailbox and In-Place Archive – where it can be discovered in an eDiscovery search. So, if archiving and eDiscovery features are available in Office 365, you may be asking why you would consider archiving your information with a third party like Symantec Enterprise Vault.cloud?The main reason is that, while Office 365 is a fantastic communications and collaboration tool, it was not designed for archiving and provides only basic capabilities. The In-Place Archives, and unlimited storage option, make Office 365 great for running large mailboxes, but we find that many customers need more functionality in order to meet their archiving, compliance and eDiscovery requirements.
Enterprise Vault.cloud is a leading cloud-based archiving service, that supplements gaps in the Office 365 solution. It enables you to defensibly archive your business-critical information, satisfy business and regulatory requirements to retain data and ensure its integrity, and respond efficiently and effectively to eDiscovery requests.An eDiscovery request could arise as a result of a legal case brought against your company, an internal HR investigation, or a contract dispute with a vendor. As a cloud-based service, Enterprise Vault.cloud requires no hardware or software, making it easy to acquire, simple to deploy, and easy to budget for. The service has two components:Enterprise Vault Personal.cloud – which enables end users to access their archived information directly from Outlook, Notes, or a Web browser.Enterprise Vault Discovery.cloud – which provides authorized users with direct, role-based access to the archive, where they can manage and collaborate on eDiscovery cases.
As a leading cloud-based archiving service, Enterprise Vault.cloud can really add value to your Office 365 deployment.
Imagine for a moment that you are in a contract dispute with one of your suppliers. You need to locate an amendment to the original contract that was agreed via email.
Using Enterprise Vault.cloud, if the email once existed, you’ll be able to find it and quickly resolve the contract dispute. This is because Enterprise Vault.cloud uses journaling to capture a copy of every email sent and received by all your end users, which is stored in a centralized and searchable online repository, and kept separate from end user action. Journaling is the only way of ensuring full message capture – which is essential if your organization has a business or regulatory requirement to retain data–and ensure its integrity–for a period of time.Journaling captures not only the original message, but also information about the sender and all recipients, including compliance-critical BCC and Distribution List recipients at the time the message was sent.
Using Office 365, there’s no guarantee that you will find the email. This is because, rather than archiving information in a separate, centralized store, the emails are kept within the user’s In-Place Archive, where they can be deleted or modified by the user. You have to ensure you have the right deleted item retention policies or legal holds in place on every mailbox in order to prevent messages from being deleted or modified, which can be difficult to manage and leaves room for error. Also, Office 365 doesn’t capture BCC or Distribution List recipients, making it impossible to accurately determine who actually received the email.
Another common scenario is where IT departments find they are spending far too much time responding to eDiscovery requests made by the legal, compliance or HR teams – such as running searches across user mailboxes, and placing content on legal hold.You want to be able to shift the eDiscovery process to those directly responsible for the eDiscovery requests, so IT can focus on other tasks.
Enterprise Vault.cloud completely removes the eDiscovery burden from IT by enabling legal, compliance, and HR teams to take full ownership of the eDiscovery process. It provides a single, easy to use interface for managing eDiscovery cases, and enables authorized legal, compliance, and HR personnel – as well as outside counsel – to be granted direct, role-based access to the archive, so that they can run searches, place content on legal hold, review items, view reports, and export content – all with no help from IT required.
Office 365 offers two tools for non-IT staff to perform eDiscovery-related tasks, but both have limitations that can ultimately lead to help from IT being required. For example:With the In-Place eDiscovery and Hold Wizard in Exchange, users can only apply a legal hold to a maximum of 50 mailboxes in a single search.With the eDiscovery Center in SharePoint, users can only run search queries across a maximum of 1,500 mailboxes. These limitations can also cause headaches for IT because if they place the data on hold or perform the eDiscovery search, then the person who applied the hold or conducted the search can be subpoenaed to appear in court to give evidence.
Another situation may be where a legal case has been brought against your company and you have to quickly search through and find emails to use as evidence to defend your case.
Enterprise Vault.cloud accelerates the eDiscovery search and review process, enabling you to quickly find the evidence you need and reduce the legal fees associated with reviewing content. It provides real-time, search-within-search functionality, that enables you to continually refine your searches “in progress” until you achieve the desired search results – you don’t have to go back and re-run the entire search. Also, built-in collaborative review capabilities help to quickly cull down search results and ensure that the resulting dataset is relevant to the case. Search results can be divided up amongst multiple reviewers, distributing the workload. Reviewers can apply review statuses to items, tag content as relevant, irrelevant, spam, personal, privileged, etc., and add notes that can be reviewed by other reviewers working on the case. Archived information in Enterprise Vault.cloud can also be exported in native Clearwell format for easy import into the Symantec eDiscovery Platform powered by Clearwell for further analysis, review, and production, providing a complete end-to-end eDiscovery solution.
Office 365 does not offer search-within-search functionality. Also, reviewing data found as a result of a search can be cumbersome. Search results are copied to a discovery mailbox, which is accessed via Outlook or OWA. Using Outlook or OWA as the review tool makes reviewing large quantities of search results or sharing review responsibilities across groups of people largely impossible. The only way to “organize” items is to move them into new folders within the discovery mailbox.
And finally, another common scenario is where an end user has deleted a message they later realise they need.
Since Enterprise Vault.cloud captures every message sent and received, it provides users with a complete record of their email, which they can access directly from Outlook or OWA. After performing a search, they can apply search filters which break the results down into categories, listing results by sender, year, attachment type, etc – enabling them to quickly drill down results and find the email they need. Users can also restore archived messages back to their Inbox from any date range – with no help from IT required.
With Office 365, end users have 2 mailboxes to manage – a primary mailbox and an In-Place Archive. It offers no search refinement options. Instead, users must go back and re-run form-based searches using Outlook or OWA until they find the information they need.This take be very time-consuming especially if the user has unlimited storage and 1000’s of emails to search amongst. Also, if a user deletes a message, it can only be recovered by the user within the maximum 30 day retention period for deleted items.
Some of the other advantages that Enterprise Vault.cloud can bring to your Office 365 deploymentare: 1. Enterprise Vault.cloud automatically retains the archives of departed employees at no extra cost until otherwise instructed by the customer.With Office 365, you need to manually apply a legal hold to the mailbox before you disable it in order to preserve it.If you forget to do this, the mailbox and all its contents will be permanently deleted after 30 days of being disabled. 2. Enterprise Vault.cloud archives messages from multiple email platforms in a single, searchable online repository – including Exchange Online, multiple versions of Exchange Server on-premise, and IBM Domino.It also archives content from SharePoint Server, Lync Server, Box, and Salesforce Chatter.With Office 365, you can only preserve Office 365 content. 3. Enterprise Vault.cloud provides all users with truly unlimited storage and retention for a fixed monthly fee.With Office 365, only the more expensive E3 and E4 plans provide the user with unlimited archive storage.However, even then a default quota of 100 GBs is set on the archive. If the user reaches this quota, you must contact Microsoft support to request more storage space.
Enterprise Vault.cloud integrates seamlessly with Office 365. It is one of the only archiving solutions to offer automated directory synchronization, which means that each time you create a new Exchange Online user in Office 365, a new archive account is automatically provisioned for them in Enterprise Vault.cloud. Also, Enterprise Vault.cloud offers Single Sign On capabilities, which means that your end users can access their archived information in Enterprise Vault.cloud directly from Outlook or OWA using their existing Active Directory username and password.
At a very high level, Enterprise Vault.cloud captures information into the archive via journaling. Unlike Enterprise Vault, the system cannot capture messages at the active mailbox level. However, administrators can opt to only journal some mailboxes – or only journal messages based on their direction – outbound or inbound only. They may also opt to capture all information into the archive. Once the information is sent to the archive, it is indexed and made available for search, retrieval, restoration to the inbox or export.Emails and their attachments are captured from on-premise and cloud-based email servers in near real-time. As an example, when a message hits a user inbox, a copy of that message appears almost instantly in the archive, where it is already fully indexed and searchable. Each message and attachment is captured and archived in its native format. Enterprise Vault.cloud does not remove messages from the mail server – that task is left to administrators, giving them the freedom to decide which messages stay on the mail server and specify the retention periods that are best for their organization. SharePoint and Box files are captured according to a sync schedule determined by the system administrator, while Chatter communications are captured in near real-time.Once the information is captured into the archive, organizational stakeholders, including IT, end users, legal, HR and compliance can instantly view it through a web folder in their email client or a supported a web browser In the event that an email, file or Salesforce post is lost or accidentally deleted, users can go into their archive and immediately perform a self-service restore of the information back to their inbox. All archived content can be searched and retrieved. It can also be exported from Enterprise Vault.cloud in various load file formats and imported into eDiscovery platforms, including Clearwell.
Enterprise Vault.cloud has 6 secure and private multi-tenant data centers worldwide managed by Symantec.
Messages journaled to Enterprise Vault.cloud are protected by TLS encryption in transit and AES 256-bit encryption at rest. For additional details on Enterprise Vault.cloud’s security, please send the prospect the Enterprise Vault.cloud Security Whitepaper (available September 2012) or schedule a time to have the client speak with one of our sales engineers.
For customers that wish to have legacy data ingested into Enterprise Vault.cloud, we have a specially-trained Data Import team. They follow a carefully outlined process to ensure that chain of custody is preserved throughout the ingestion process and that data integrity is maintained. The process is as follows:Step1. Extraction: In this phase, the customer’s legacy email data is extracted from existing repositories. This includes email stores sitting on an email server, PST/NSF files, legacy archives (from a previous email archiving solution), and/or backup tapes. This is a critical step where it’s easy to inadvertently break the chain of custody. Therefore, it’s important to document the number of original files/PSTs/NSFs sitting in the customer’s existing stores and compare them to the total number of files/PSTs/NSFs imported into your archive.Step2. Shipment: Prior to shipping the data, customers complete the Chain of Custody document, which captures key information such as date and time sent, number of files, number of emails, format of legacy data (e.g., PSTs), amount of data, and contact information. The data and the Legacy Upload Order Form are then sent to the attention of the "Symantec Enterprise Vault.cloud Data Import Center."Step3. Verification: Upon receipt of the customer’s data, the Data Import team will process your data through its check in process, verifying they can access all files, then provide a case update which includes an estimated completion date. The team logs, initials, and dates the Chain of Custody Form under received data. The completion date is based on the current volume of legacy uploads in our queue and the amount of data to process. In the meantime, the Data Import team places your customer’s data in our data vault for safe storage.Step4. Data import: After the customer’s legacy data is prepared, the Data Import Specialist imports it into Enterprise Vault.cloud. Once indexed, administrators and users can quickly search archived emails and attachments using search criteria such as to, from, date, subject, message body, message attachments, and other message properties. As a final check, the Data Import Specialist verifies the data and signs off on the Chain of Custody Form.Step5. Chain of custody documentation: Once the import is complete, a Data Import Specialist updates the case management system and sends the customer an email documenting the results. Any deviations from the original Chain of Custody Form are noted and reviewed.Step6. Returned data/destroyed data: In the final step, the Data Import team returns the original data to the customer or destroys it. In either case, the team documents the process and notes the date the media was either returned or destroyed, per the customer’s instructions.
Enterprise Vault.cloud helps clients defensibly and securely archive content sources beyond email, providing a more comprehensive solution to meet legal and compliance requirements. These new capabilities allow clients to capture files from Microsoft SharePoint and Box as well as public and private messages and attachments posted on Salesforce Chatter. New content sources:Microsoft SharePoint 2003, 2007 and 2010 (on-premise only): capture files from SharePoint document libraries and make them available for search in the archive by end users and approved reviewersBox: archive existing and new files stored in Box since the initial date of account creation and make them available for search in the archive by end users and approved reviewersSalesforce Chatter: archive Chatter posts, including private and public messages as well as attachments and make them available for search in the archive by end users and approved reviewers
Enterprise Vault Mailbox Continuity.cloud*, an add-on feature, helps maximize email availability, and guard against the disruption and data loss that can result from an email outage. The service provides organizations with a hosted email failover system that automatically activates when an outage occurs, allowing users to continue sending and receiving messages through their active internet connection–without interruption.* Requires Symantec Email Security.cloud.
Customers using Enterprise Vault.cloud will already have eDiscovery capabilities, including the ability to search across the archive, place items on legal hold, enforce retention policies, and conduct basic legal review capabilities. For customers looking for more granular search and review functionality, Enterprise Vault.cloud can export search results to the Symantec Clearwell eDiscovery Platform. Customers interested in Clearwell will have advanced search, review and analytics capabilities, plus they can include search results from other non-archived sources such as desktops, laptops, file servers and more.
There are a few different components to Enterprise Vault.cloud. At a basic level, Enterprise Vault.cloud includes Enterprise Vault Personal.cloud, which allows end users to access their archives directly from their email client, and Enterprise Vault Discovery.cloud, which captures all messages sent and received throughout an organization into a central repository that can be easily searched in the event of a legal discovery request or HR investigation. Organizations can also opt to add Enterprise Vault Mailbox Continuity.cloud to their archive. This solution ensures that end users can user their archives to continue sending and receiving messages and attachments in the event the primary mail system fails or is unavailable due to maintenance (requires Symantec Email Security.cloud). We will refer to this service as “email continuity” for the remainder of this presentation. The combination of Enterprise Vault.cloud plus email continuity is called Enhanced Enterprise Vault.cloudIn addition, U.S-based financial services firms that need to meet SEC and FINRA compliance requirements may opt for Symantec AdvisorMail, which helps them meet supervision and tamper-proof storage requirements. Customers can add Bloomberg, Reuters, IM and social media archiving options to AdvisorMail.Symantec also offers some additional add on products for an additional charge:Enterprise Vault.cloud Folder Sync allows users to maintain their Outlook folder structure in the archiveEnterprise Vault.cloud Blackberry captures SMS and PIN-to-PIN messages from BlackBerry devices and also allows for native access to the archive from those devicesEnterprise Vault.cloud SharePoint option captures files from document libraries in SharePoint 2003, 2007 and 2010 (on-premise) and stores them in the archiveEnterprise Vault.cloud Salesforce Chatter option captures Chatter posts, including private and public messages as well as attachments into the archiveEnterprise Vault.cloud Box option captures files from Box and stores the in the archiveThere are two additional services not mentioned on the slide:Enterprise Vault.cloud’s import option - allows for easy merging of existing email storage into Enterprise Vault.cloud and is available for an additional chargeEnterprise Vault.cloud’s CloudLink – allows administrators to synchronize Domino Directory or Active Directory with the archive. If you are using Exchange, CloudLink also allows your administrator to quickly create, configure, and push out Web folders for Enterprise Vault Personal.cloud to all of your users simultaneously.Supported platformsEnterprise Vault.cloud captures data from a variety of platforms, including Microsoft Exchange Server, Microsoft Office 365, IBM Lotus Domino and BlackBerry devices. In addition to capturing emails and IMs, AdvisorMail also captures social media content from LinkedIn, Twitter and Facebook.(Please see this Technote for the most up-to-date compatibility list: http://www.symantec.com/docs/TECH191408
