ASD ISM 1023 Notify parties of blocked emails

1. 01

   IT Team should develop a process to monitor blocked emails: Set up an email system feature that flags emails when they are blocked.

   Use straightforward email filters to catch these incidents and send alerts to relevant parties.

2. 02

   Office Manager should ensure all staff are aware: Hold a short, informal meeting to explain how staff will be informed if their emails are blocked.

   Use examples to show how emails are blocked and what they can do to fix the issue.

3. 03

   System Administrator should configure email notification settings: Go into the email system settings and enable features that send automatic notifications to users when an email they send or receive is blocked.

   Make sure to test this setting by sending a test email and checking if the notification works.

4. 04

   HR Department should update email policy documents: Add a section to your company's email policy detailing what happens when emails are blocked and how notifications are handled.

   Share the updated document with all employees via email.

5. 05

   Office IT Support should provide support channels: Create an easy way for users to report or ask questions if they get a notification about a blocked email.

   This could be a shared email address or a helpdesk phone number that staff can use to quickly get help.

1. Check 1 of 5What an auditor asks for

   Ask for

   The logs of blocked emails: Request logs that detail any emails blocked by the system within a specific timeframe.

   Look at

   The timestamps, email addresses involved, and reasons for blocking.

   Good evidence

   Log will show comprehensive details for each blocked email, including key information like recipient, sender, and the date of the notification sent to the user.

2. Check 2 of 5What an auditor asks for

   Ask for

   User notification records: Request proof that notifications were sent to staff when emails they sent or received were blocked.

   Look at

   Examples where users were successfully notified and their issues were resolved.

   Good evidence

   Record will include the notification sent, the recipient's response, and any follow-up actions taken.

3. Check 3 of 5What an auditor asks for

   Ask for

   To demonstrate the notification system: Request a walkthrough showing how the system sends notifications for blocked emails.

   Look at

   How the system is set up to alert both the sender and the intended recipient.

   Good evidence

   Demonstration will show clear steps from detecting a blocked email through to sending out notifications.

4. Check 4 of 5What an auditor asks for

   Ask for

   Training materials shared with staff: Request a copy of any training slides or documents shared with employees about email handling and blocked notifications.

   Look at

   Covers on what blocked emails mean and steps employees should follow when notified.

   Good evidence

   Set of materials will be comprehensive, clear, and user-friendly.

5. Check 5 of 5What an auditor asks for

   Ask for

   Updates made to email policies: Request the latest version of the email usage policy showing procedures for handling blocked emails.

   Look at

   Clear sections on the notification process for blocked emails and responsibilities of staff.

   Good evidence

   Policy will clearly define what has changed and how employees are informed.

No mappings to other frameworks are recorded for this control yet.