|
Email Security
|
Email Threat
|
Exposure
|
CNG's Security Blanket
|
|
Power failure
|
Email can't be used. Incoming email could be lost.
|
Backup Power, Battery Power, Power load-shedding during extreme power usage.
|
|
Network Failure
|
Email can't be used. Incoming email could be lost.
|
Dual network path inside our datacenter. Dual Backbone connection. Backup routers,
switches.
|
|
Virus / Spam attack (*)
|
Email could be compromised, your recipient gets infected email.
|
Microsoft Forefront protection. Microsoft TMG protection.
|
|
Hacker Attack
|
Email could be lost, email contents could be compromised.
|
Microsoft Firewall (ISA 2006, TMG 2010) protection, CISCO firewall protection.
|
|
Human Error
|
Email could be compromised.
|
Management control, system backup, Exchange Archiving, offsite storage of backup
material.
|
|
|
|
|
Overview / Benefits
Protection
Mobile Email
Compliance Features
Order Email
|
|
CNG's Hosted Email - Overview
|
Let CNG handle the technology "stuff" while you enjoy a multitude of features
that allow you to ALWAYS stay in touch with your Emails, calendar, meetings - even
when you are not in the office!
ALL of our Email accounts include:
Strong Firewall protection
Industrial Strength Virus and Spam protection
Access to your accounts via Outlook Web Access, Outlook 2007, Outlook 2010 and Entourage
MAPI, IMAP, POP3, OWA and ActiveSynch protocol support
Support for ALL Mobile devices
Customer Control Panel
.... and the support you need to get up and running quickly.
|
Benefits
|
Exchange 2010 offers a rich set of functionality, which allows you to access all
of your Mail, Calendars, Contacts, Meetings…and much more
-- From your Desktop (via Outlook 2003, 2007, 2010)
-- From Outlook Web Access (OWA) via any browser
-- From your Mobile device
Standard features available on all accounts include:
Centralized and Secure message storage
Shared address lists
A single Contact List synchronized with Outlook, OWA and your Mobile device
Synchronized Email
Synchronized Calendars
Email Searches
Full system backups performed weekly
Advanced mailbox features are also available for:
Email Archiving
User managed mailbox backup/restore via CCP
|
At CNG Internet, email security is a multi-discipline effort.
This is borne out of the multiple, and different threats that email is faced with.
You, our customer, must feel comfortable with what we do to have it all secure.
That is where Security Blankets come in. Comfy, flexible, strong, and versatile
Our Security Blankets:
|
Email Threat
|
Exposure
|
CNG's Security Blanket
|
|
Power failure
|
Email can't be used. Incoming email could be lost.
|
Backup Power, Battery Power, Power load-shedding during extreme power usage.
|
|
Network Failure
|
Email can't be used. Incoming email could be lost.
|
Dual network path inside our datacenter. Dual Backbone connection. Backup routers,
switches.
|
|
Virus / Spam attack (*)
|
Email could be compromised, your recipient gets infected email.
|
Microsoft Forefront protection. Microsoft TMG protection.
|
|
Hacker Attack
|
Email could be lost, email contents could be compromised.
|
Microsoft Firewall (ISA 2006, TMG 2010) protection, CISCO firewall protection.
|
|
Human Error
|
Email could be compromised.
|
Management control, system backup, Exchange Archiving, offsite storage of backup
material.
|
(*) we treat spam and virus protection at the same level. Often, these days, a virus
directed at an Exchange server will try to 'sneak in' via an email / email attachment.
|
|
|
CNG Mail recovery addresses two possible mail failures, User Errors and System Failures.
A good Email backup / recovery plan can handle both challenges. We:
- Back up CCP usage, including User initiated Email management tasks (enabling a
roll-back)
- Back up Exchange data stores, to be able to recover from systems problems
- Enforce a 30-day retention period for (User initiated) mail-item deletes
- Enforce a 30-day retention period for (User initiated) mailbox deletes
- Enable recovery of User-initiated mail-items, as well as mailboxes
|
|
|
Getting up and running with a Mobile device is a 2 step process:
|
|
- When you purchase your mobile device (i.e. Verizon,
AT&T, etc.) you will need to sign up for a “Data Plan” that provides you with
access to the Internet. If you have a Blackberry, you will need a “Blackberry” plan
for corporate Email.
- Signup with CNG Internet for an Email account
that includes support for your device. If you already have an Email account with
CNG, just give us a call and we will add your device to your current plan.
|
Our Help Desk will be happy to assist you in setting up your Email account on your
device.
Once we know what type of device you have and activate it on our Exchange server,
we will send you an “activation” Email and your device will start synchronizing
with CNG’s mail server.
|
|
|
CNG has installed the latest Blackberry Enterprise Server so that
you
can fully synch your Blackberry with Outlook Web Access and Outlook
2007/2010
|
- Windows Mobile
- Apple iPhone 3G
- Apple iPhone 4G
|
- Cingular 8100 Series
- Dell Axim X50
- HP iPAQ 6315, hw6500
- Motorola MPx220
- Treo Devices 600, 650, 700
- Samsung i700, SCH-i730
- Sprint 6700, PPC-6601
- T-Mobile Pocket PC Phone Edition
- Verizon Audiovox XV6600
- and many more
|
Recognizing that not all our users need the capabilities of advance Email and Collaboration
on Mobile Devices, we price Mobility as an add-on, with the following break-down:
|
Mobility Solution
|
Monthly Fee
per user
|
Setup Fee
|
|
BlackBerry Enterprise Server
|
|
$0.00
|
|
ActiveSync Devices
|
|
$0.00
|
|
Good Messaging Server
|
|
$0.00
|
|
Compliance
|
While certain organizations MUST implement Email Compliance, many more organizations
are now CONSIDERING Email compliance.
Compliance, at a procedural level, is the need to organize, index, retrieve, store
and protect Email (i.e. electronic record).
The different compliance rules at the federal, state, or local level call for different
Email Compliance processes.
CNG Internet's implementation starts with the most important compliance regulations,
including:
SEC and FINRA
FRCP
SOX
HIPAA
and assures that required Emails using E-Discovery & Litigation Readiness can
be produced in a timely and complete manner.
See a list at bottom of page for the various agencies that CNG's compliance
product supports.
|
Compliance Approach
|
In the past, managing compliant Email had to rely on third-party Compliance software
/ procedures that were an add-on to Email hosting environments.
Microsoft Exchange Server 2010 has new built-in messaging policy and compliance
features that allow organizations to easily comply with regulations related to messaging
retention, protection of personal information, and fulfilling legal discovery requests
for messaging records. CNG Internet can now deliver ONE seamless Enterprise Level
solution for Email Compliance. The new offering is enhanced by a Compliance Managament
oriented secure Interface, the ECP, to be used by Email Users, Administrators, IT
staff, as well as Compliance Officiers. Email processing and Email Compliance -
all in one product!
|
Email Archiving
|
The Email Archive process implemented by CNG Internet builds on MS Exchange 2010
features, as well as software developed by us. Each Email account (or individual
mailboxe) that you designate as 'Must-Archive' has a copy of EVERY incoming
and outgoing Email securely retained in special Exchange data stores as a 'read-only'
copy. Indexes for retained Email messages are recorded by date/time, and subject
line.
These archived Emails can be searched, marked, and retrieved by designated Email
users. Searches can be on text in header, body, and (unencrypted) attachments.
CNG Internet will install your Archive rules with these requirements in mind:
- Authentication via write-readback process that assures a 'true' copy is archived
- Encryption to ensure non-disclosure
- Rules that address one or more of the following audits: SEC, NASD (i.e. FINRA),
IDA, HIPAA, SOX, FRCP, privacy
- Monitor, Search, Retrieval audits to assure retention policies are followed
- Monthly archiving reports
- Permanent deletes of archived Emails under client control
- Special login is required to access archived Email
- Email can be retrieved into standard PST files, or a number of other file structures,
including SQL databases
|
A list of agencies CNG's Compliance Product covers.
|
- Administrative Procedure Act
- American Recovery and Reinvestment Act of 2009 (ARRA)
- Commodity Futures Trading Commission (CFTC Rule 1.31)
- Computer Security Act
- Davis-Bacon and Copeland Act
- Department of Defense 5015.2 Version 2
- Dodd-Frank Wall Street Reform and Consumer Protection Act
- Electronic Communications Privacy Act (ECPA)
- Fair and Accurate Credit Transactions Act of 2002 - FACTA
- Family Educational Rights and Privacy Act (FERPA)
- FINRA Regulatory Notice 07-59 / 10-06
- FISMA (Federal Information Security Management Act of 2002)
- Federal Rules of Civil Procedure (FRCP) (Rule 26 and Rule 37)
- Gramm-Leach Bliley Act (GLBA)
- Health Insurance Portability and Accountability Act of 1996 (HIPAA)
- Health Information Technology for Economic and Clinical Health (HITECH) Act
- Identity Theft - SB 1386 - California
- NARA GRS20
- Privacy of Consumer Financial Information - Regulation S-P
- Red Flags Rule
- Right to Financial Privacy Act - RFPA
- Sarbanes-Oxley Act of 2002 (SOX)
- UPPBRA - Uniform Preservation of Private Business Records Act
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|