Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
IT Management
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

The Billion-Dollar Data Storage Error

Elizabeth Charnock, Cataphora   Today’s Top Stories    or  Other Management Stories  
 

Sign up to receive Security Resource Alerts

July 26, 2005 (Computerworld) -- Wall Street banking giant Morgan Stanley recently suffered an adverse $1.45 billion court judgment, which contributed to a change in leadership at the top. The turning point? The judge's ruling that Morgan Stanley had acted in "bad faith" in failing to turn over relevant e-mails. "The storage folks found an additional 1,600 backup tapes in a closet," explained a Morgan Stanley executive.
Maybe Morgan Stanley was careless, or maybe it was unlucky. But if you think your organization is prepared to face a lawsuit, you may want to think again. The needs for evidence disclosure are very different from those of data or disaster recovery that most IT departments have in place. Now would be a good time to find out what your legal obligations might be. You should meet with your legal department, and to get the ball rolling in your conversation, here are five crucial questions you might want to ask:

  • What is our document-retention policy and how does that fit with current judicial expectations?

  • What are some of the potential liabilities to our company if we lose a case involving a large electronic discovery?

  • How strict are court-initiated deadlines?

  • What is spoliation, and how do I avoid it?

  • Why do I need to know what's in the data?

First, whatever your document-retention policy may be, it can be overridden by legal action, or even the prospect of legal action. In some cases, companies have been sanctioned for destroying documents, even though the destruction was consistent with a document-retention policy. One ruling stated that the company could reasonably have anticipated that the documents could be relevant to a lawsuit that was clearly foreseeable, even though no suit had yet been launched. Under those circumstances, the documents should have been preserved, whatever the document-retention policy might have said.
Second, keep in mind that the stakes in litigation can be enormous, far exceeding the cost of the related legal and IT fees. Not every case results in a billion-dollar verdict but, depending on the issue, your organization could certainly suffer a significant financial impact. Being a party to a major lawsuit can also affect business processes and share price. The more efficiently and effectively you deal with gathering and analyzing the evidence, the sooner such impacts will be eliminated. It's even possible that corporate officers or employees could be facing the prospect of jail time. Gathering the evidence isn't something you want to get wrong.
Missing a court deadline, depending on the nature of the case, could result in a fine of up to seven figures for each day you are late in providing required evidence. Although you may think of the legal system as slow, deadlines can be very aggressive. These deadlines are made even tighter because attorneys often wait to start a discovery project until they have tried to do everything they can to get the case settled or dismissed. In addition, there is always the added risk that a judge will interpret any delays as deliberate and assume that you're putting off delivering the data because you have something to hide.
You need to especially avoid spoliation, which is defined as "the destruction, alteration or mutilation of evidence." It's important that the procedures followed for collecting electronic evidence are meticulous and meet appropriate standards. The data must be collected without being spoiled or altered, and someone must be able to attest to the chain of custody, showing how the evidence was collected and kept safe and unaltered from first to last. This in itself is a very good reason for using an outside vendor that's experienced in collection of evidence. Third parties are also less likely to be accused of having a vested interest in what they find or fail to find or of tampering with the evidence.
Finally, it's not enough to simply locate all of the requested files. You must know what's in them. You must weed out documents that need not be handed over. Any e-mail message containing legal advice from an attorney, for example, is likely to be "privileged" and need not be provided. Doing so could be very damaging. You also need to have a good understanding of the content in the documents you hand over so your legal team can prepare the best possible legal strategy.
Elizabeth Charnock is CEO of Cataphora Inc. in Redwood City, Calif. You can contact her at elizabeth.charnock@cataphora.com.



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"The generation holding most corporate leadership positions today has a lot to learn from the fresh concepts that are being..." Read more...
"Are you the uber-geek at your job who holds all the pieces of the network and security together? If so,..." Read more...
Read more Management posts or See all Blogs
iPhone out of stock 'company wide,' say Apple sales reps
Microsoft to limit capabilities of cheap laptops
FBI worried as DoD sold counterfeit networking gear
More top stories...
Update: Microsoft to appeal $1.3B EU fine
XP SP3 cripples some PCs with endless reboots
Windows Vista more secure than XP, says security company
Ubuntu 8.04 is a popular Linux distribution that offers some updated features along with its usual easy-to-use interface and solid support.
Forget "Format c:" or any of those silly software programs that promise to remove data from hard drives. Get physical — really physical.
Was it the receptionist, the salesman or the building manager? Here's how to find and stop the leaks.
Now you can get cell phones customized with services specific to your religion. Columnist Mike Elgan picks the three best devices.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
HP's Virtualization: HP's Remote Client Solutions Webinar
HP's Virtualization: HP's Remote Client Solutions Webinar
View this webcast!
Go to the webcast 
Computerworld Report: Storage Gets Strategic
Download this Computerworld Report, free, compliments of HP.
(Source: Computerworld) Data Storage has emerged from the back room to become a key part of regulatory compliance, disaster recovery and strategic tecnhology plans. Learn more in this new this Computerworld report, a $49.95 value, available free for a limited time, compliments of HP.
Download this executive briefing download
Does collaboration drive business success?
Get this white paper now!
(Source: Microsoft Office Live Meeting) Collaboration occurs at the intersection of an enterprise's technology and culture. Discover how these two critical factors affect the quality of collaboration in Meetings Around the World: The Impact of Collaboration on Business Performance. You'll learn why enterprises need to work collaboratively - and examine how collaboration impacts business success.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
New Fujitsu High-End Itanium Windows- and Linux-Based PRIMEQUEST Servers Offer the Utmost in High Availability
New Fujitsu High-End Itanium-Based PRIMEQUEST Servers Offer Industry-Leading System Management for Linux and Windows
Symantec State of the Data Center Report 2007
View more whitepapers 
HP Compaq t5735 Thin Client

Linux-based thin client delivers desktop-like performance supporting a variety of open-source applications, creating a new paradigm in thin client computing. The NEW HP Compaq t5735 Thin Client provides convenient access to server-based solutions, Virtual Desktop Infrastructure (VDI) or to a variety of remote client solutions.

Download this datasheet 
Global Operations Uses HP Thin Clients to Improve Security and TCO

Do you need a secure standardized platform while maintaining a lower cost of ownership company wide and to help make the company more competitive? Read how the CIO of the world's largest manufacturer of polyethylene folding tables, chairs, picnic tables, and residential basketball equipment obtained his IT Goal with HP Thin Clients.

Download this case study 
HP's Virtualization: HP's Remote Client Solutions Webinar

- Hear from IDC analysts on PC Client Virtualization and Alternatives to Client Computing
- Hear how customers solved IT challenges with HP's solution to Virtualization
- Learn about different types of virtualization market analysis from HP's CTO
- Hear from the VP of Netpads, Inc. how HP Thin Client solutions helped solve IT challenges, security concerns and lowered TCO for the emerging hospitality.

View this webcast