Controls

Terug naar overzicht
Version

SB.3.002 Email forwarding

Communications Security
Low
Low
nvt
Organisation
v2.0 (Q1 2024)

Description

Automatic forwarding of email to external addresses is denied-by-default.

Specification

Information does not automatically leave the organisation.

If the individual has a legitimate organisational need to be reached after the end of the formal relationship with the organisation, the individual can request an out-of-office to be set including new contact details.

Other domains belonging to the organisation are not considered external.

Forwarding to external domains can only occur under control of the organisation, taking appropriate organisational, contractual and technical measures to safeguard that information remains under control of the organisation.