RE: e-mail policies

["Fields, James" <James.Fields () bcbsfl com>]

Your company simply cannot respect the privacy of its employees with respect
to E-Mails sent through your own E-Mail servers.  Employees should be
required to read and sign off on acceptance of an E-Mail policy, in which it
should be made crystal clear that their communications using corporate
resources are NOT private.  Corporate E-Mail accounts are not for personal
communications.

I think you will find that even most Internet Service Providers include such
language in their policies; they don't guarantee that no one at the ISP will
ever see your E-Mail.

-----Original Message-----
From: pablo gietz [mailto:pablo.gietz () nuevobersa com ar] 
Sent: Monday, February 24, 2003 2:03 PM
To: security-basics () securityfocus com
Subject: e-mail policies

Dear gurus

We are defining policies for the use of corporate e-mail, I have doubts 
about privacy of messages sent by employees. Since the e-mail system is 
intended for business use, we need to prevent sensitive information 
disclosure. If we respect the privacy , how can discover infidelity 
employee?
 What is your opinion or the standard in this cases? What is the 
companies approach?

Thanks a lot.

-- 
Pablo A. C. Gietz
Jefe de Seguridad Informática
Nuevo Banco de Entre Ríos S.A.
Te.: 0343 - 4201351






Blue Cross Blue Shield of Florida, Inc., and its subsidiary and 
affiliate companies are not responsible for errors or omissions in this e-mail message. Any personal comments made in 
this e-mail do not reflect the views of Blue Cross Blue Shield of Florida, Inc.