Sox Compliance?

[dynamicwebs]

Does anyone have any software or ideas how to integrate SOX compliance with Cpanel. I would love to have an automated software solution to backup all email files for incoming/outgoing emails for the day for each hosted account or domain and stored locally.

Any thoughts, let me know.

Frank Beier
Findlay, Ohio

 

[nyjimbo]

This would be a great feature. We are getting customers who are willing to pay alot more if we can do this sort of thing.

I think something that would simply do a copy of all incoming emails to a master mailbox or something and then archive it and delete it daily would be all we need.

 

[dynamicwebs]

Customers want SOX compliance with Cpanel

Yes, I too am also getting all of our larger corporate clients wanting SOX compliance to exist on the server side instead of the client side. My only fear is that we are now behind the eightball and will start loosing customers if we cannot come up with an affordable solution ASAP. Our ISP who is co-hosting our server does not feel it is their responsibility to provide the solution, so we are shopping around for another provider who has cpanel and sox compliance. However, I still feel I would like to have the ability to automatically backup the mail directory either with a cron solution or other solution would be nice and provide the ability to backup to a remote server or computer.

For me, the clock is ticking and the customers are grumbling. A solution is needed YESTERDAY or I'm out of the hosting business in the next few months.

SOS to all who can help! I will pay for a developer to create the solution and share royalties if need be.

Frank Beier
Findlay, Ohio 45840
:D

 

[Spiral]

Cpanel backup already backs up the mail ...

However, it's simple enough to setup a separate process to build another backup
or just simply put in a filter to monitor all inbound and outbound mail.

Either of those measures could be implements in just a minute or two!

 

[rs-freddo]

I don't USA clients but I can't see anywhere in the SOX regs where it says all emails need to be archived....

This is the closest I could find:
"Section 802 of Sarbanes-Oxley requires public companies and their public accounting firms to maintain all audit or review work papers for a period of five years from the end of the fiscal period in which the audit or review was concluded. This includes electronic records which are created, sent, or received in connection with an audit or review."

It is interesting to note that this was also stated:
"Some companies have initiated very time consuming and costly internal standards that are beyond what is actually required for SOX compliance."

If you want to hold onto your clients you might be better off implementing systems that do what the regulations require rather than do what misguided clients THINK is required.

 

[Lyttek]

Cpanel backup already backs up the mail ...

However, it's simple enough to setup a separate process to build another backup
or just simply put in a filter to monitor all inbound and outbound mail.

Either of those measures could be implements in just a minute or two!

This is essentially what I've done for one client, a law office, though not for SOX compliance... more of 'CYA' compliance ;-)

Mailscanner directs a copy of all incoming and outgoing emails to an outside-their-domain account. Every X number of minutes, a process running on their Windows server SCP's the files down from the cPanel box into a directory that only the business owner and myself have access to. It's been working like a charm for over a year now with NO maintenance from me.

 

[nyjimbo]

Cpanel backup already backs up the mail ...

However, it's simple enough to setup a separate process to build another backup

Cpanel may do a backup but it does NOT keep copies of all mail as they come in, before a client can delete them. If you wait for Cpanel to do its 2am backup then most customers have already deleted or "corrupted" the email bag for the day and its not all there.

 

[Spiral]

Cpanel may do a backup but it does NOT keep copies of all mail as they come in, before a client can delete them. If you wait for Cpanel to do its 2am backup then most customers have already deleted or "corrupted" the email bag for the day and its not all there.

You obviously didn't read my second sentence :D