IT Baseline Protection Manual - The Information Warfare Site

Data Transmission Systems E-Mail
_________________________________________________________________________________________
Recommended Countermeasures (S)
For the implementation of IT baseline protection, selection of the required packages of safeguards
("modules") as described in chapters 2.3 and 2.4, is recommended.
As regards e-mail systems, the following essential aspects need to be investigated:
- E-mail software is used to transmit, receive and process e-mail.
- This e-mail software transmits and receives e-mail to/from a mail server. The mail server maintains
a mailbox for every user. For the further exchange of information, the mail server communicates
with gateways which forward the messages to other mail systems.
A comprehensive security policy (refer to S 2.118 Determination of a security policy for the use of email)
needs to be prepared for the implementation of security measures for the exchange of electronic
mail. The operation of e-mail systems entails the implementation of security measures for the mail
server as well as the clients in use. The security precautions and instructions to be observed by users
are of particular importance.
The package of measures for the area of e-mail is listed in the following:
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000