Reader small image

You're reading from  CISA – Certified Information Systems Auditor Study Guide - Second Edition

Product typeBook
Published inJun 2023
PublisherPackt
ISBN-139781803248158
Edition2nd Edition
Right arrow
Author (1)
Hemang Doshi
Hemang Doshi
author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi

Right arrow

Email Security

In this digital world, email is a widely used mode of official communication for both internal and external stakeholders. A lot of critical and sensitive information is shared through email. It is very important to secure email communication.

The following are some email-related risks and controls:

  • Relying only on SMTP is not relatively secure as email security requires an end-to-end method, such as the use of digital signatures or the use of integrity checks at the transport level.
  • Social engineering attacks such as phishing and spear phishing can be addressed through security awareness training of employees.
  • Email attachments should be scanned by anti-malware software.
  • Users should be trained on the security aspect of using email.
  • Mail servers should be properly hardened and configured as per the organization’s security policy and guidelines.
  • The implementation of encryption technologies to protect user authentication and mail...
lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
CISA – Certified Information Systems Auditor Study Guide - Second Edition
Published in: Jun 2023Publisher: PacktISBN-13: 9781803248158

Author (1)

author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi