Well...it's economic, but I guess not in the way one might immediately think. The number of grandma's that change ISPs for said benefit may or may not be low. HOWEVER, much like US eDiscovery law strategies, sometimes it is far far far safer for a company to keep nothing (or very little) based upon a company policy, rather than get sued for an email from 9 years ago.

Actually, just got started with one - IT compliance for a fairly large entity. Oddly, the CIP standards are vaguely comforting. They are at least a stationary target.

I came from six years in the financial sector--GLBA is more like trying to find a black cat at the bottom of a coal mine. Totally subjective, with examiner skill level ALL over the map.

Anyway, send me an email if you want to commiserate sometime. jbaxter at my website domain name.

Not a bot...just deal with the CIP standards daily. NERC is walking a tightrope between a calcified industry and FERC power grabs.

Uh...don't believe everything that FERC says, either to you or to Congress...