Requirement
Cybersecurity requirements for protecting email service must be defined, documented and approved.
Control Implementation Guidelines
- Develop and document cybersecurity policy for email protection in the organization, including the following:
- Modern and advanced protection techniques and mechanisms’ availability and reliability must be ensured
- Email Protection Solution Configuration Requirements
- Email roles and responsibilities requirements for public and joint accounts
- Size of incoming and outgoing email attachments and the capacity of the mailbox for each user
- Secure design requirements for email infrastructure
- Support the organization's policy by the Executive Management. This must be done through the approval of the organization head or his/her deputy
Relevant Cybersecurity Tools
- Email Security Policy Template
Expected Deliverables
- Email security policy and standard document approved by the organization (e.g., electronic copy or official hard copy)
- Formal approval by the head of the organization or his/her deputy on the policy (e.g., via the organization's official e-mail, paper or electronic signature)
