Please wait while the page is being loaded Skip this advertisement >
Sunday | 23 November, 2008
CIO
Juris e-prudence
There was a time when judges were prepared to consider arguments that incompetence or computer problems might be to blame if companies were unable to produce e-mails on demand.
Sue Bushell 11 October, 2005 12:30:11

E-mail Briar Patch

To get a sense of why the Morgan Stanley case might herald a "legal Chernobyl", it is worth considering the case in some detail. To sum up briefly the relevant aspects of a complicated case, early in the case of securities fraud initiated by Ronald Perelman against Morgan Stanley (MS), in which Coleman (Parent) Holdings (CPH) sued MS for aiding and abetting and conspiring with Sunbeam to perpetrate a fraud, CPH began to suspect MS was failing to search vigorously enough for e-mails responsive to its discovery request.

On April 6, 2004, the court entered an Agreed Order that required Morgan Stanley to search its oldest full backup tapes for e-mails subject to certain parameters, and certify compliance. Morgan Stanley certified compliance with the Agreed Order on June 23, 2004. All seemed well until November 17, 2004, when CPH learnt MS had found some backup tapes that had not been searched. Two months later, CPH served a "Motion for Adverse Inference Instruction Due to Morgan Stanley's Destruction of E-mails and Morgan Stanley's Non-compliance with the Court's April 16, 2004 Agreed Order", claiming that Morgan Stanley's violation of the Agreed Order justified an adverse inference against it.

The Florida state judge overseeing the case, Judge Elizabeth Maass, seemingly agreed, ruling that Morgan Stanley "deliberately and contumaciously violated numerous discovery orders", and finding it had hidden information about its violation and coached witnesses to avoid mentioning compliance problems.

The alarming thing about all this from the CIO's point of view is that none of the problems, according to Morgan Stanley, was even remotely intentional. According to a Wall Street Journal story, Morgan Stanley responded to the paper's questions with a written statement claiming all of its recent "discovery problems" stemmed from honest mistakes, such as computer glitches and misplaced backup tapes, and were not attempts to stonewall adversaries.

If those claims are true, the result not only could not have been worse for Morgan Stanley but also highlights the vulnerability of many organizations to the same perils. Because Judge Maass, showing no patience for such defences, issued a partial default judgement against the company, essentially handing an automatic loss to the Wall Street firm, because "the [discovery] abuses have continued unabated", and said she intended to instruct the jury to assume that the firm had helped defraud Perelman.

"The presiding judge in this case essentially directed a verdict against Morgan Stanley for concealing potentially harmful e-mail messages and refusing to cooperate in good faith in the pre-trial discovery process," Rosenberg says.

In the course of the litigation, the role of two IT executives in particular came under scrutiny. As detailed by the Wall Street Journal story, Arthur Riel, then head of Morgan Stanley's technology compliance group, was the one who signed the June 23, 2004 court document certifying he had handed over all e-mails the firm had agreed to produce in the suit.

But two weeks earlier, according to the Wall Street Journal story, Riel had not been so sure. "The storage folks found an additional 1600 backup tapes in a closet," Riel told two Morgan Stanley lawyers, according to a deposition quoted in court papers. MS acknowledged in court that they had not searched the tape for e-mails before Riel signed the document. Riel at the time was overseeing a multimillion dollar project to put almost 300 million e-mails into an easily searchable archive, moving them over from storage on magnetic tapes. Morgan Stanley said Riel, believing the work to be pretty well completed, searched only the new database.

As a result, Riel's certification dated the oldest available tape at January 2000, although he and his team knew by early July 2004 that the newly discovered tapes went back to the late 1990s, the period at issue in the suit. Court documents show Morgan Stanley did not disclose this knowledge until November. According to Riel's attorney, Jeffrey Pigano, that is because Riel believed the certification only covered the archive, his area of responsibility, but not tapes that had not yet been entered into the archive, while a Morgan Stanley spokesperson claimed that in general only a small fraction of its tapes contained e-mail and that it did not know whether the newly discovered tapes did so.

According to the Wall Street Journal story, Riel was placed on administrative leave last August, accused of looking through co-workers' e-mail in violation of company policy in a matter the company claimed was unrelated to the suit. His lawyer called that explanation "materially misleading", and noted Judge Maass had called his client a "whistleblower" in connection with a separate SEC investigation into Morgan Stanley's relationships with third-party vendors.

Whatever the truth of that matter, the Wall Street Journal says Riel's responsibilities were then turned over to Allison Gorman Nachtigal, who testified that the department provided no written instructions in how to search one of its key systems for e-mail, that a software bug caused many searches to be case-sensitive, and that there was a shortage of computer storage space. She later testified she was not told to merge the newly discovered tapes with the department's database, and so put the task near the bottom of "a long list", apparently unaware of the ongoing lawsuit.

Related Features
  • +

    Ticked Off at Tick the Box Mentality 04 February, 2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
Additional Resources
Featured Whitepaper Sponsors
Market Place
 
Featured Whitepapers

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Chris Hoff on Virtualization and Cloud Computing 20 November, 2008 10:55:00

    Chris Hoff, chief security architect for the systems and technology division at Unisys and an advisor on the Skybox Security customer advisory board, is one of the biggest critics of virtualization security out there. Not because it isn't important - but rather because it is vital and needs to mature rapidly.
  • +

    Cybersecurity is focus of new start-up incubator 20 November, 2008 07:19:00

    Texas uni announces the Institute for Cyber Security.
    The University of Texas at San Antonio Tuesday announced a technology incubator aimed at fostering IT security-based start-ups within the state.
  • +

    Dilip Sarangan on Physical Security M&A 20 November, 2008 11:18:00

    Dilip Sarangan tracks physical security companies for Frost & Sullivan. He expects the industry's "need to have" products to weather the economic storm well, with the big players (now including IBM and Cisco) looking for value-priced acquisitions.
  • +

    International Challenges in PCI Security 20 November, 2008 09:15:00

    In a country that's seen many regulatory compliance challenges this decade, the headaches of PCI security tend to be analyzed from a largely American perspective.
  • +

    PCI council sharpens oversight of security auditors 19 November, 2008 10:53:00

    Quality assurance plan targets security assessors and scanning vendors
    The PCI Security Standards Council Monday unveiled a plan to sharpen oversight of the hundreds of security-service providers now authorized to evaluate merchant networks under the organization's Payment Card Industry data standards.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Taking On Demand CRM Integration to the Next Level

Discover the current integration challenges facing businesses attempting to deploy on demand CRM systems. Learn how to create comprehensive integration of your data, user interface and business process levels and transform a portfolio of disparate applications into a unified, virtual application suite.