As a business we have a good spam filter which protects against 99% of externally originated spam emails and quarantines them. Recently however we have been receiving lots of spam from internal email addresses. The root cause of this is being investigated by the infrastructure team but we can't block emails from internal addresses for obvious reasons.
I have been asked to provide a 'guideline' document on how to deal with internal spam emails, most of which relies on common sense. For example:
- If you receive an email from 'firstname.lastname@example.org' and you haven't scanned anything, don't open the attachment and delete the email. Especially if it's an Excel document as our scanners don't produce Excel files...
- If you receive spam email from an external address forward it to email@example.com so it can be blocked.
- If you receive an email which is clearly spam (such as from 'Irinka' who wants a good spanking) then don't click the links in the email...
- If you receive a blank email with an attachment you're not expecting then don't open it and either delete it or ask IT for advice.
We're not a massive business so showing people how to scan emails for viruses (using ESET Endpoint Antivirus) is easy, as is how to scan documents that have been saved. But to save time doing this we would like to send round some easy guidelines.
My question is can anyone think of anything that might not be completely obvious that would be good to add to this list. Appreciating that organisations have different structures, processes and procedures. I would like to put together a 'definitive' list (or as much as possible) to cater for the majority of circumstances. Being that we as a business have limited experience of any spam emails actually making it through the filters/firewalls I was hoping to draw on any collective experience.
The guide will be sent to everyone from MD level downwards.