How can enterprises prevent the risk of email data leakage? (including live broadcast preview)

Email data leaks occur frequently, mostly caused by “insiders”

With the continuous deepening of enterprise informatization and digital construction, data has become the most valuable asset, and the fate of many businesses is closely linked to key data. Ensuring email data security has become one of the important tasks of critical infrastructure units and enterprises and institutions.

The Ministry of Public Security disclosed at a press conference held on August 10 that in the past three years, the Ministry of Public Security has deployed public security agencies across the country to carry out a special "Network Cleanup" campaign to crack down on illegal and criminal activities that infringe on citizens' personal information, anchor the source of leaks within the industry, and crack down hard on the industry. A total of more than 2,300 "insiders" were arrested in telecom operators, hospitals, insurance companies, real estate, property management, express delivery companies and other industries.

Information leakage is a public hazard. The leakage of sensitive data assets such as source code, corporate sensitive data, and even important project data will cause irreversible major damage to enterprises and units.

Enterprise email data security construction is weak

Ensuring the security of email data is one of the important tasks of enterprises and units. However, as can be seen from the frequent email data leakage incidents in recent years, the construction of email data security by enterprises and units is still relatively weak.

1. Lack of complete internal strategies and policies

Enterprises and units may lack clear email data security strategies and policies, making the internal control measures of enterprises and units insufficiently comprehensive and effective.

2. Employee safety training and awareness are not in place

Enterprises and units do not provide adequate email data security training for employees. Employees have weak awareness of email data security and lack the sensitivity and ability to deal with the risk of email data leakage.

3. Lack of complete email approval management and control links

The behavior control of employees by enterprises and units is a difficult link in the construction of email data security. Potential malicious behaviors of employees are difficult to detect, so relevant approval and monitoring processes need to be set up. However, many companies and units lack complete email approval control links.

Enterprise data security compliance needs are becoming increasingly urgent

As an important industry in informatization construction and a financial industry involving a large amount of sensitive data, the People's Bank of China issued the "Technical Specifications for Personal Financial Information Protection (JR/T 0171-2020)" on February 13, 2020. Information defense should be deployed. Leakage monitoring tools monitor and report illegal outflow of personal financial information.

The Ministry of Industry and Information Technology issued the "Key Points for Network Data Security Compliance Assessment of Telecommunications and Internet Enterprises (2020 Edition)" and pointed out that platform systems involving the storage and processing of personal sensitive information and important data are equipped with data leakage prevention capabilities, and priority is given to the network side and terminal side. Deploy and gradually expand capability coverage. It has the ability to conduct real-time monitoring of various data import and export channels such as network, email, FTP, USB, etc., and can provide early warning and interception of abnormal data operation behaviors in a timely manner to prevent the risk of data leakage.

In recent years, data security-related laws and regulations have been promulgated and gradually refined, indicating that data security protection must be implemented into specific practices, and enterprises and units must pay more attention to data security construction and data leakage prevention.

As an important business system of enterprises, email is often used by "insiders" as one of the means of data leakage. Therefore, email data leakage is also an email security risk that enterprises need to pay attention to and prevent. By using email data leakage prevention products (E-mail Data Leakage Prevention), you can ensure continuous management and control optimization of email data security, meet the compliance needs of enterprises, and avoid various email data security risks.

How can we better prevent the risk of email data leakage? At 15:00 on September 19, the Coremail email security product team will tell you the answer!

September 19 (Tuesday) 15:00