Do's & Dont's

Selecting a Solution:
DO
 Know What You Need 
DO Look for Integrated and Manageable Solutions
DO Consider User Impact and Auditing Requirements
DO Consider Recipient Compliance Requirements
DON’T Select Plug-In Mandatory Solutions

DO Know What You Need

Know your use case(s)

DO Consider User Impact & Auditing Requirements:
Solutions requiring user behavior changes are problematic

  • Only as effective as user diligence
  • Challenging to audit

Enforce policy in the network wherever possible

  • External messages: gateway
  • Internal messages: groupware

 

  • Internal encryption 
    (Groupware)
  • External to close partners
    (Gateway TLS)
  • External to B2B/B2C
    (Gateway “Secure Envelope”)
  • Portal integration
    (Secure Webmail)

End-to-end required or is gateway sufficient?

  • Gateway covers most cases & simplifies administration, reporting, etc.

Keep RFPs / selections focused on your needs

  • Avoid temptation to ask for everything as
    “future-proofing”
  • Focusing the RFP ensures best responses from
    vendors who specialise in what you need

DO Look for Integrated and Manageable Solutions

  • Single point for configuration, reporting, monitoring
  • Comprehensive email security

Data Loss Prevention (DLP), Encryption, Anti-Spam
Anti-Virus

Deploying a Solution

  • DO Train Internal Users
  • DO Inform Recipients
  • DO Stage Your Rollout
  • DO Start with Highly-Targeted Data Loss Prevention Policies
  • DON’T Just Flip On and Hope for the Best

DO Train Internal Users

WHY email encryption is being deployed

HOW they will be impacted

Do they need to do something?

What types of emails will be automatically encrypted

WHAT the recipient experience will be.

 

DO Inform Recipients

WHY email encryption is being deployed and how it helps protect them

HOW to open the secure messages they receive

WHO to contact if they have concerns or issues

 

DO Stage Your Rollout

Follow standard best practices for deploying new applications and capabilities

Encryption will visibly and tangibly impact email

Pilot group helps test all aspects of the solution

  • Product, training, support, etc

Make sure pilot includes representative business users - not just IT and early adopters.


Top of Page