Educause Security Discussion mailing list archives
Re: [External] Re: [SECURITY] Email Banner
From: "Hart, Michael" <mhart20 () MSUDENVER EDU>
Date: Mon, 29 Jun 2020 13:39:24 +0000
Happy Monday, Phil. We don’t whitelist unless the security team has had a chance to review the service. Some services use shared IP space for the mail servers, and we won’t whitelist them. We use this as an opportunity to deal with these services and get them migrated into our existing solutions to get the banners removed. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Phillip Romig III Sent: Thursday, June 25, 2020 3:27 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] [External] Re: [SECURITY] Email Banner If the group will indulge me, I’d like to ask a follow-up question. Of those who do use a banner or subject line, who decides who has the authority to say what messages should be whitelisted (if any). We have the usual suspects using external email services – SaaS and the like. Some are easy decisions (messages from our LMS for example don’t get tagged) while others are a controversial mix of political and technical issues. Do you have an authority who can say yes/no to a whitelisting request, and if so who? Thanks Phil P.S. I realize it is tacky to ask a followup question without responding to the initial question, so you can see an example of both our subject line modificaton and our banner in the attached message. -- Phillip R. Romig, Ph.D. Chief Information Security Officer (303) 273-3866 From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of "Ballister, Mark" <Mark_Ballister () URMC ROCHESTER EDU<mailto:Mark_Ballister () URMC ROCHESTER EDU>> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Date: Thursday, June 25, 2020 at 10:01 AM To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: [External] Re: [SECURITY] Email Banner CAUTION: This email originated from outside of the Colorado School of Mines organization. Do not click on links or open attachments unless you recognize the sender and know the content is safe. Thank you all for your responses on the email banner, it was appreciated and produced the data I was looking for. Thank you, Mark From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> On Behalf Of Ballister, Mark Sent: Wednesday, June 24, 2020 10:53 AM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Email Banner Good afternoon I am looking for information on who has implemented an external email banner and who has not. For those that have, have you seen an improvement in user behavior around phishing? Thank you for your time. Thank you, Mark Mark J. Ballister, CPP | CISM | CISSP Chief Information Security Officer (CISO) University of Rochester (585) 276-6200 (Office) (585) 472-2361 (mobile) [UR.4col.v2] ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cpromig3%40MINES.EDU%7C19b4a195e4d44e939c2308d8192101f8%7C997209e009b346239a4d76afa44a675c%7C0%7C0%7C637286976850485490&sdata=dDpX7xQB4VBRoKZBjKjlK%2BXqAmIN0buhxoVFsX64pJM%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Re: [EXTERNAL] Re: [SECURITY] Email Banner, (continued)
- Re: [EXTERNAL] Re: [SECURITY] Email Banner Hart, Michael (Jun 24)
- Re: Email Banner Todd Watson (Jun 24)
- Re: Email Banner Ron Lee (Jun 24)
- Re: Email Banner Todd Watson (Jun 24)
- Re: Email Banner Rick Haugerud (Jun 24)
- Re: Email Banner Douglas R. Lomsdalen (Jun 24)
- Re: Email Banner Ballister, Mark (Jun 25)
- Re: Email Banner Spiars, Vince (Jun 25)
- Re: [External] Re: [SECURITY] Email Banner Phillip Romig III (Jun 25)
- Re: [External] Re: [SECURITY] Email Banner Miller, Richard H. (Jun 26)
- Re: [External] Re: [SECURITY] Email Banner Hart, Michael (Jun 29)