Email Record: Assessing and managing security risk in IT systems :