Re: Flagging external emails and exceptions

[Blake Brown <Blake.Brown () MHCC EDU>]

We applied the external tag last year and have provided a few exceptions, college B2B relationships (BlackBoard, 
MyEmma, EAB, etc.), which has not been too cumbersome to manage. Most users were ok with it,  only a few dissenters.

Highly recommended to deploy this as it was easy to train ends users to recognize and (hopefully) think twice before 
clicking on a link.

Thanks,
Blake

________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Beth Albertson 
<albertb3 () WWU EDU>
Sent: Wednesday, September 30, 2020 5:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Flagging external emails and exceptions

External Email


Colleagues,



We are thinking of flagging emails coming in external from our O365 tenant with either a red header at the top of each 
email or adding something like <EXTERNAL> to the subject line.  I wanted to ask other schools that are doing this 
whether they are adding exceptions for external organizations that are trusted.  For example, we use Jira, and I 
thought we could add this to an exception list.  Some have argued that maintaining such a list could be cumbersome and 
could potentially confuse users because some external emails would be flagged and others would not.  Does anyone have 
experience or thoughts on this matter?



Sincerely,



Beth Albertson, CISSP®, PMP®

Director of Information Security

Western Washington University

beth.albertson () wwu edu<mailto:beth.albertson () wwu edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community