NO-10—Email Spam Protection

>Control Description

Organization has documented procedures and protection mechanisms in place to protect its information and information systems from spam and ensures that signature definitions are updated whenever new releases are available.

Theme

Process

Type

Preventive

Policy/Standard

Network Security Standard

>Implementation Guidance

1. Ensure that a process is defined and documented to ensure spam protection on emails. 2. Ensure that appropriate controls are deployed to prevent spam from emails. 3. Ensure that spam signature definitions are updated when new releases are available.

>Testing Procedure

1. Inspect the documentation to ensure a process is defined for spam protection. 2. For a sample of applicable systems such as mail servers ensure that anti-spam filters are enabled and are updated to the most recent version possible.