Connect with the world's leading business experts.
Get instant access to their expertise via world–class Q&A, Research, and Events.
0
Unified Communication Security
I am wondering how to best mitigate legal discovery risks introduced with voice messaging. I don’t know enough to assess if this is “false perception” or reality with regards to discover-ability and how to mitigate. We have a business integration needs (serving 50,000+ employees) halted by concerns from legal and I’m looking for expertise/information to help the business come to terms with an acceptable solution knowing we are not the first (e.g. unified messaging).
Events
- Social Media and Content Marketing For Business Q&A Feb 14 @ 11 am PT
- The Rise of Pinterest in B2B Feb 15 @ 11 am PT
- ERP – Priming Your Business to Deliver Value From Strategy to Operations Feb 15 @ 1 pm PT
- How Not to Coach Your Salespeople Feb 16 @ 1 pm PT
- BI's Intersection with Social Media Feb 22 @ 2 pm PT
Related Activity
1 Answer
Hi Jonathon,
we have long experience in UC solution for mission critical application, where the infrastructure and content security are very important. We serve large private and gov organizations worldwide.
I guess that the risk is real and the UC solution have to guarantee the customer the maximum protection.
In particular I see three kind of risks:
- the simple and always actual risk to be intercepted on the path of the communication
- the risk to have my identity stolen allowing some one to take my reole
- the risk of open my organization to the outside world and loose control of what is going out and coming in.
Therefore a UC solution, from my point of view, have to offer these basic features:
- Be served based, not peer to peer
- Be naturally closed form the outside world, offering controlled gateways
- Encrypt the the communication flow, end to end, with high level algorithm (AES 256 + SSL)
- Grant high level authentication (better if strong authentication), authorization profiling (who can talk call to, ...) and detailed accounting
- Integrate with the organization directory to reduce the impact of managing long list of users and profiles and inherit the authentication policy.
Regarding the legal aspect, we never found specific issues, due to the fact the communication supported are private. Legal interception can be operated on the gateway that, normally, open the infrastructure to the outside world.
For any additional information do not hesitate to contact me.
Regards, Stefano
Answer This Question