+APP.5.3.A2 Secure Operation of E-Mail Servers (B)

APP.5.3.A2 Secure Operation of E-Mail Servers (B)

The IT Operation Department MUST implement protection mechanisms against denial-of-service (DoS) attacks. E-mail servers MUST offer secure transport encryption for receiving e-mails and accessing e-mail clients via public data networks. If e-mail servers send e-mails on their own, they SHOULD also use secure transport encryption for this purpose.

An organisation MUST specify all the e-mail protocols and services it permits. In addition, the IT Operation Department MUST configure e-mail servers so that they cannot be misused as spam relays.

If messages are stored on an e-mail server, the IT Operation Department MUST configure and document an appropriate size limit for the server-side mailbox.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.40 Denial of Service