E-Mail policy for church leadership

[kalebpederson]

Is there a general e-mail policy for church leaders?

I know that in this thread it's mentioned that name, address, phone and e-mail is considered sensitive data. However, many people view e-mail as secure and are willing to send e-mails containing this information to other church leaders.

I might venture a guess that two leaders who have ldsmail e-mail accounts could both log on and send information back and forth securely, as long as they don't have POP or IMAP setup (without TLS or some other encryption mechanism). However, is this acceptable? What about ldsces e-mail accounts?

I would really like to have something stronger than, "I really don't recommend this!", even if it's simply do not do this until a policy has been established.

Thanks.

--kpederson

[JamesAnderson]

Might this knowledgebase document found on clerk.lds.org be of help to you?

http://www.lds.org/ldsorg/v/index.jsp?v ... 6f620a____

[kalebpederson]

Might this knowledgebase document found on clerk.lds.org be of help to you?

http://www.lds.org/ldsorg/v/index.jsp?v ... 6f620a____

Yes, that's very useful as it clarifies the policy.

I do, however, completely disagree with the statement at the end:

"
Security Risks with Internet E-mail
E-mail is just as secure as postal mail in the USA and is substantially more secure than postal mail in developing countries. This is not to say that either e-mail or postal mail is totally secure.
"

Having been hired to configure, re-configure, analyze, or otherwise secure e-mail servers, etc., I know that at many ISPs this is far from the case .

--kpederson

[WelchTC]

Yes, that's very useful as it clarifies the policy.

I do, however, completely disagree with the statement at the end:

"
Security Risks with Internet E-mail
E-mail is just as secure as postal mail in the USA and is substantially more secure than postal mail in developing countries. This is not to say that either e-mail or postal mail is totally secure.
"

Having been hired to configure, re-configure, analyze, or otherwise secure e-mail servers, etc., I know that at many ISPs this is far from the case .

--kpederson

Noted. Thanks for the information. As with all forms of communication, we should be extra cautious and careful when dealing with sensitive and confidential information.

Tom