Egress or alternative??

[jimbopembo]

Our HT has asked me to find a solution, as a matter of urgency, that enables us to recall mistakenly sent emails and attachments. We use M365.

I've had a demo of Egress Prevent and Protect, which appears to do the job, but the pricing is prohibitive.

I would be interested to know what other schools are doing to mitigate against potential data breaches and enabling recall of mail and docs.

Any good alternatives to Egress that won't break the bank?...

 

TIA

[free780]

You can pay for A5 MS licensing and do something with Information protection to protect files with authentication and encryption.

 

You can provide warning tooltips as part of M365 Compliance (not sure of licensing requirements)

 

I can't see how recall can work without access to Gmail, Yahoo, Microsoft and every mail service in the world.

[RLR]

I'm not aware of anything that can recall an email once it's been sent out of your domain. There are things you can put in place to try prevent and block emails going outside of the domain.

[timbo343]

Our HT has asked me to find a solution, as a matter of urgency, that enables us to recall mistakenly sent emails and attachments. We use M365.

I've had a demo of Egress Prevent and Protect, which appears to do the job, but the pricing is prohibitive.

I would be interested to know what other schools are doing to mitigate against potential data breaches and enabling recall of mail and docs.

Any good alternatives to Egress that won't break the bank?...

 

TIA

 

Could something like delayed sending be enabled for your mail system? I have something like that set to 20 seconds so i can "undo" a sent email up to 20 seconds.

[Oaktech]

I'm pretty sure that's not really a thing, further than the Google 'I regret this immediately' 20 second undo, and the Exchange, 'please can I have the message back, pretty please' options.

 

Even if recalling every sent message was possible from every provider, what happens when a message is read faster than an error is realised? Are they expecting, the service to be able to erase people's memory of having read a message Men In Black style?

Edited October 5, 2022 by Oaktech

[Ditto]

Barring a delay, I can't see it being possible. What time delay is the HT willing to accept and then I think some options could be looked at.

 

Thinking more broadly, it comes down to data loss, so focussing purely on email isn't going to give the best solution. A whole school approach is going to be more impactful. You might want to start at https://ico.org.uk/for-organisations/sme-web-hub/how-to-minimise-the-risk-of-personal-data-breaches-happening/.

 

I note that Egress Prevent and Protect is deemed unaffordable and I get that, but DPA/GDPR makes it a requirement to show your are taking precautions. I'd suggest for every penny potentially spent on software solutions, perhaps spend on staff training would help with Data Loss Prevention (DLP).

 

With the specifics that led to the heads requests, and I appreciate there may be a limit with what you can share, but can you guide what sort of data went from and to? If it's appropriate, password encryption may be something to consider. In terms of M365 delays, it's not something I've looked at closely, but I would suggest reviewing what Viva Insights can do - maybe as a starter see https://learn.microsoft.com/en-us/viva/insights/personal/use/delay-delivery