Email Security
Email is a widely used mode of official communication for both internal and external stakeholders of any organization. A lot of critical and sensitive information is shared through email so it is very important to secure email communication.
The following are some email-related controls:
- Relying only on SMTP for email management is not relatively secure as email security requires an end-to-end approach, such as the use of digital signatures or the use of integrity checks at the transport level.
- Social engineering attacks such as phishing and spear phishing can be addressed through security awareness training of employees.
- Email attachments should be scanned by anti-malware software.
- Users should be trained on the security aspect of using email.
- Mail servers should be properly hardened and configured as per the organization’s security policy and guidelines.
- The implementation of encryption technologies to protect user authentication...
