From d2cb4e4a5dec7256eca5ce1315fe65fd58adbd6c Mon Sep 17 00:00:00 2001 From: gearnode Date: Tue, 7 Jan 2025 18:30:09 +0100 Subject: [PATCH] Remove risk assessment Signed-off-by: Bryan Frimin --- .../COM-EMAIL-001_sender_policy_framework.md | 7 ------- .../email-security/COM-EMAIL-002_dkim_implementation.md | 7 ------- 2 files changed, 14 deletions(-) diff --git a/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md b/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md index 164181729..1eb51a762 100644 --- a/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md +++ b/controls/communication-security/email-security/COM-EMAIL-001_sender_policy_framework.md @@ -16,13 +16,6 @@ domain. It helps receiving mail servers verify that incoming email from a domain comes from a host authorized by that domain's administrators. -## Risk Assessment - -| Risk | Impact | Reason | -|---------------------------------|--------|----------------------------------------------------------------------| -| Phishing and Social Engineering | 8 | Reduces phishing by preventing email spoofing of company | -| Business Email Compromise (BEC) | 8 | Prevents attackers from impersonating trusted partners or executives | - ## Implementation 1. Identify all legitimate email sources: diff --git a/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md b/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md index 27a882b74..7c88b5189 100644 --- a/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md +++ b/controls/communication-security/email-security/COM-EMAIL-002_dkim_implementation.md @@ -15,13 +15,6 @@ adding a digital signature to outgoing messages, allowing receiving mail systems to verify that emails genuinely came from your domain and weren't modified in transit. -## Risk Assessment - -| Risk | Impact | Reason | -|---------------------------------|--------|----------------------------------------------------------------------| -| Phishing and Social Engineering | 8 | Reduces phishing by preventing email spoofing of company domains | -| Business Email Compromise (BEC) | 8 | Prevents attackers from impersonating trusted partners or executives | - ## Implementation ### Google Workspace