APP.5.3.A1 Secure Configuration of E-Mail Clients (B)
An organisation MUST specify a secure configuration for its e-mail clients. The e-mail clients MUST be pre-configured when they are handed over to the users. The organisation MUST ensure that the security-relevant aspects of the configuration cannot be changed by users. If this is not possible, the organisation MUST inform the users that they are not permitted to change the configuration on their own. Before file attachments from e-mails are opened, they MUST be checked for malware by a protection program on the client, if this is not already done on the e-mail server. E-mail clients MUST be configured in such a way that they do not automatically interpret any HTML code or other active content in e-mails. Preview functions for file attachments MUST be configured so that they do not automatically interpret files. E-mail filtering rules and uncontrolled automatic forwarding of e-mails MUST be limited to necessary application scenarios. E-mail clients MUST use secure transport encryption for communications with e-mail servers across untrusted networks.
1. Pregled
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
3. Povezani propisi
Povezani zadaci
|