Assignment task: Attached is an example of a company's email retention policy. Explain 3 items that you believe are incorrect with this policy and why. Then, explain what you would do to make the policy better.
XYZ Corporation's Email-Retention Policy
Due to new laws and compliance, XYZ Corporation has implemented a corporate-wide email-retention policy. This policy defines archiving expectations for users of the corporate email system. This policy is owned and updated by the Information Technology Security Director.
As stated, all email communications on XYZ Corporation's email and messaging systems are subject to review. This review can occur for regulatory reasons as well as unlawful use. All users are subject to this policy and should follow the guidelines described below:
All email communications should be retained for a minimum of 6 months within the email system. At this time, users should archive their email using a personal archive saved on their network home folder. This will reduce the amount of storage within the email system.
Once archived, emails must be saved for a minimum of 5 years.
Annually, users must review their personal archives and delete emails not required for retention over 5 years.
Users not abiding by this policy will be subject to disciplinary action, up to and including termination.