diff --git a/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md b/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md index 164181729..1eb51a762 100644 --- a/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md +++ b/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md @@ -16,13 +16,6 @@ domain. It helps receiving mail servers verify that incoming email from a domain comes from a host authorized by that domain's administrators. -## Risk Assessment - -| Risk | Impact | Reason | -|---------------------------------|--------|----------------------------------------------------------------------| -| Phishing and Social Engineering | 8 | Reduces phishing by preventing email spoofing of company | -| Business Email Compromise (BEC) | 8 | Prevents attackers from impersonating trusted partners or executives | - ## Implementation 1. Identify all legitimate email sources: diff --git a/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md b/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md index 27a882b74..7c88b5189 100644 --- a/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md +++ b/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md @@ -15,13 +15,6 @@ adding a digital signature to outgoing messages, allowing receiving mail systems to verify that emails genuinely came from your domain and weren't modified in transit. -## Risk Assessment - -| Risk | Impact | Reason | -|---------------------------------|--------|----------------------------------------------------------------------| -| Phishing and Social Engineering | 8 | Reduces phishing by preventing email spoofing of company domains | -| Business Email Compromise (BEC) | 8 | Prevents attackers from impersonating trusted partners or executives | - ## Implementation ### Google Workspace