Depending on where you’re at with your Exchange “maturity model”, here are a few pieces I’ve written for SearchExchange.com about Microsoft Exchange security oversights, policies and plans to help you along the way:
How to write an effective data retention policy for Exchange
Solidify Your Exchange Server Incident Response Plan
Common Exchange Security Oversights
Enjoy!
As always, be sure to check out www.principlelogic.com/resources.html for links to my additional information security articles, whitepapers, podcasts, webcasts, books and more.