Email Record: Building an effective information security policy architecture