E-mail is now an established and increasingly essential channel of business and personal communication. As such, safeguarding its operation and integrity is an issue of widespread significance. At the same time, e-mail has proven itself to represent a considerable threat vector, providing a route for a variety of attacks including malware, phishing and spam. In addition, e-mail usage can introduce further risks if not appropriately guided and managed, with the potential for confidentiality to be compromised and reputations to be damaged. With these points in mind it is relevant for all stakeholders to consider their role in protecting e-mail and using the service appropriately.

This guide provides a concise reference to the main security issues affecting those that deploy and use e-mail to support their organisations, considering e-mail in terms of its significance in a business context, and focusing upon why effective security policy and safeguards are crucial in ensuring the viability of business operations. The resulting coverage encompasses issues of relevance to end-users, business managers and technical staff, and this holistic approach is intended to give each key audience an understanding of the actions relevant to them, as well as an appreciation of the issues facing the other groups.