How you can ensure compliance management with Vaultastic
Regular proactive audits of email communication are crucial to mitigating conduct, reputational, and financial risks.
Organizations need to manage the risk related to information leakage and ensure regulatory compliance about supervision and reporting of email communications:
To ensure compliance, organizations often need the help of external experts, auditors, and enforcement agencies to review potential policy violations and decide the course of action.
How can you share critical and possibly classified email information with external people while maintaining privacy and confidentiality?
- The integration of Vaultastic with Ideolve, Mithi’s team collaboration tool, can be of great help here.
- The internal compliance team typically consists of an auditor with access to Vaultastic and who will follow daily, weekly, monthly routines or perform on-demand searches for objectionable emails to share with the other internal members and external auditors.
- The internal and external compliance team members will have shared access to specific workspaces on the Ideolve tool.
- The internal auditor will upload objectionable emails to the individual workspaces on ideolve and share those with the relevant people for deeper analysis and review.
- The team members will post comments and tag each other to collaborate and arrive at actionable steps to deal with the violation.
- And this entire activity, all comments, and decisions are recorded permanently in Ideolve as an audit trail for future reference.
- This document highlights the two-part process - the first is a one-time process of onboarding the compliance teams on Ideolve and Vaultastic. The second is the creation of proactive routines/SOPs to detect and manage (potential) policy violations.
Preparation to ensure compliance management
Onboarding the internal and external compliance team members on Ideolve
The internal auditor to sign up on Ideolve using the business email id.
The internal auditor now creates workspaces for each category of compliance (e.g., “regulatory compliance,” “communication policy compliance,” “information leakage review”) to segregate the reviews and possibly the compliance teams too. This structure is as per the organization's policy.
- The internal auditor now invites relevant internal and external auditors and team members to each workspace by adding their email ids. The members will accept the invites and create their Ideolve account to now be a part of the relevant workspace(s).
Onboarding the internal auditor on Vaultastic
Log in as the Vaultastic Administrator.
Ensure that you have enabled archiving for all or targeted employees.
Provide ediscovery access to all vaults or selected ones to the designated internal auditor.
Integrate Ideolve with Vaultastic
- Login to Ideolve
- The top icon on the Application Bar shows your profile photo. Click on the Profile photo and navigate to the Settings page.
- Navigate to Integration Details under Connection to Other Apps.
- Copy the Client ID and the API Key.
- Login to Vaultastic
- Click on the profile initials in the top left corner and select Integrate with Ideolve
- Enter the email-id that you used for signing up on Ideolve in the User ID field
- Enter the Client ID and API key that you noted in step 4
- Click Save
Routines/SOPs to ensure compliance management
Define and save queries to detect breaches
Define and save searches that look for emails indicating a (potential) compliance violation.
Create the query using mail attributes, keywords, and a date range and give the saved search a relatable name, e.g., “breaches 1-7 Jan 2022”, “information leakage,” “tone violations,” etc.
Scan for breaches on-demand or periodically
Log in to Vaultastic as the internal auditor.
Run the appropriate saved search.
Review the results and upload all or selected mails to Ideolve.
While uploading, select the appropriate workspace and share each mail with the relevant auditors who are part of the workspace.
Vaultastic flags uploaded emails.
Review notes of the other auditors for flagged email
Log in to Vaultastic as the internal auditor.
Run the appropriate saved search.
The emails earlier uploaded to Ideolve will be flagged.
Click on any of the flagged emails to show the discussion thread for this email in the Ideolve widget.
Review discussions, comments by auditors for all flagged emails together
Log in to Ideolve as the Internal auditor.
Search or browse emails and the comments by other auditors.
Tag or update the subject for all emails whose audit is complete to reflect the completion.
