Need details on IDR Mailbox setup and access

Summary:

Hello,

My Client's Information Security team would like to know the following about the IDR Mailbox settings in Production. Does anyone know how to obtain these details?

How long is the email kept?
Does it archive or purge?
Who has access to the mailbox?
Can client control what addresses or sources can deliver mail to that mailbox to control spam?

Thanks

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):