Email Security Implementation Guidance - Cloud Security Alliance

More documents

Recommendations

Info

CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 4: Email Security3.1.3 Programmatic Access ............................................................................................................................. 153.1.4 Self-Service ............................................................................................................................................. 153.1.5 Client Controls ........................................................................................................................................ 163.1.6 Management and Monitoring ................................................................................................................ 163.1.7 Integration .............................................................................................................................................. 163.2 Concerns ........................................................................................................................................................ 163.2.1 Data Security .......................................................................................................................................... 163.2.2 Regulatory Compliance........................................................................................................................... 173.2.3 Data Disclosure ....................................................................................................................................... 173.2.4 Data Residency ....................................................................................................................................... 173.2.5 Identity ................................................................................................................................................... 183.2.6 Logging .................................................................................................................................................... 183.2.7 Communications ..................................................................................................................................... 184.0 Architecture and Implementation Steps ........................................................................................................... 194.1 Architecture Overview ................................................................................................................................... 194.1.1 Fully Outsourced Email Implementation ................................................................................................ 204.1.2 Email Security Cloud Augmentation to Premise Enterprise Implementations ...................................... 204.2 Guidance and Implementation Steps ............................................................................................................ 224.2.1 Client Security ......................................................................................................................................... 224.2.2 Administration ........................................................................................................................................ 234.2.3 Submission End-Point, the Mail Submission Agent ................................................................................ 234.2.4 Mail Delivery Agent ................................................................................................................................ 234.2.5 Mail Transfer Agent ................................................................................................................................ 244.2.6 Mail Storage ............................................................................................................................................ 24© Copyright 2012, Cloud Security Alliance. All rights reserved. 4
CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 4: Email SecurityForewordCloud Computing represents one of the most significant shifts in information technology manyof us are likely to see in our lifetimes. We are reaching the point where computing functions as a utility,promising innovations yet unimagined. The major roadblock to full adoption of Cloud Computing has beenconcern regarding the security and privacy of information.Much work has been done regarding the security of the cloud and data within it, but until now, there have beenno best practices to follow when developing or assessing security services in an elastic cloud model—a modelthat scales as client requirements change.One mission of the Cloud Security Alliance is to provide education on the uses of Cloud Computing to helpsecure all other forms of computing. To aid both cloud customers and cloud providers, the CSA SecaaS WorkingGroup is providing Implementation Guidance for each category of Security as a Service, as delineated in theCSA’s SecaaS Defined Categories of Service. Security as a Service was added, as Domain 14, to version 3 of theCSA Guidance.Cloud Security Alliance SecaaS Implementation Guidance documents are available athttps://cloudsecurityalliance.org/research/working-groups/security-as-a-service/.We encourage you to download and review all of our flagship research at http://www.cloudsecurityalliance.org.Best regards,Jerry Archer Alan Boehme Dave CullinaneNils Puhlmann Paul Kurtz Jim ReavisThe Cloud Security Alliance Board of Directors© Copyright 2012, Cloud Security Alliance. All rights reserved. 5
Page 1 and 2: SecaaS Implementation GuidanceCateg
Page 3: CLOUD SECURITY ALLIANCE SecaaS Impl
Page 7 and 8: CLOUD SECURITY ALLIANCE SecaaS Impl
Page 25: CLOUD SECURITY ALLIANCE SecaaS Impl

Email Security Implementation Guidance - Cloud Security Alliance

Create successful ePaper yourself

Delete template?

Save as template?