+APP.5.3.A1 Secure Configuration of E-Mail Clients (B)

APP.5.3.A1 Secure Configuration of E-Mail Clients (B)

An organisation MUST specify a secure configuration for its e-mail clients. The e-mail clients MUST be pre-configured when they are handed over to the users.

The organisation MUST ensure that the security-relevant aspects of the configuration cannot be changed by users. If this is not possible, the organisation MUST inform the users that they are not permitted to change the configuration on their own.

Before file attachments from e-mails are opened, they MUST be checked for malware by a protection program on the client, if this is not already done on the e-mail server. E-mail clients MUST be configured in such a way that they do not automatically interpret any HTML code or other active content in e-mails. Preview functions for file attachments MUST be configured so that they do not automatically interpret files. E-mail filtering rules and uncontrolled automatic forwarding of e-mails MUST be limited to necessary application scenarios.

E-mail clients MUST use secure transport encryption for communications with e-mail servers across untrusted networks.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.39 Malware