Add email firewall control
Signed-off-by: Bryan Frimin <bryan@frimin.fr>
This commit is contained in:
@@ -0,0 +1,40 @@
|
||||
---
|
||||
id: "PLT-EMAIL-004"
|
||||
category: "platform/email-security"
|
||||
revision-version: 1
|
||||
revision-date: "2024-01-07"
|
||||
estimate-time: "15m"
|
||||
frameworks:
|
||||
- name: "soc2"
|
||||
sections: ["CC6.8", "CC7.2"]
|
||||
---
|
||||
|
||||
## Purpose
|
||||
|
||||
Implement email filtering and warning systems to reduce phishing risks
|
||||
and protect employees from malicious emails. This reduces mental load
|
||||
on employees and decreases company risk exposure through email-based
|
||||
attacks.
|
||||
|
||||
## Implementation
|
||||
|
||||
### Google Workspace
|
||||
|
||||
1. Access [Google Admin Console](https://admin.google.com).
|
||||
2. Navigate to Settings
|
||||
```
|
||||
Apps → Google Workspace → Gmail
|
||||
```
|
||||
3. Configure "Safety" settings:
|
||||
- Attachments Protection
|
||||
- Scan for anomalous attachment types
|
||||
- Block attachments with scripts
|
||||
- Block encrypted attachments from untrusted senders
|
||||
- Links and External Images:
|
||||
- Enable scanning of linked images
|
||||
- Identify shortened URLs
|
||||
- Display warning prompts for untrusted domains
|
||||
|
||||
## Evidence
|
||||
|
||||
- Screenshot of email security settings in Google Admin Console.
|
||||
Reference in New Issue
Block a user