{"id":2417,"date":"2025-12-11T14:04:17","date_gmt":"2025-12-11T13:04:17","guid":{"rendered":"https:\/\/www.syredis.fr\/?page_id=2417"},"modified":"2025-12-11T14:04:56","modified_gmt":"2025-12-11T13:04:56","slug":"2417-2","status":"publish","type":"page","link":"https:\/\/www.syredis.fr\/?page_id=2417&lang=en","title":{"rendered":"Security_Email_Eng"},"content":{"rendered":"

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t<\/span>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Secure Your Local Authority\u2019s Email System<\/span><\/h1>\n\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

Protect staff, elected officials, and citizens against phishing, address spoofing, and ransomware.
This page provides a foundation of operational measures, ready-to-use templates, and reference resources.<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

1) Block Common Attacks<\/span><\/h4>\n\t\t\t\t\t\t

Enable multi-factor authentication (MFA) and anti-phishing filters on service mailboxes and privileged accounts..<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

2) Authenticate Your Domain<\/span><\/h4>\n\t\t\t\t\t\t

Deploy SPF, DKIM, and DMARC with a quarantine<\/em> policy, then reject<\/em>, to prevent domain spoofing.<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

3) Prepare for Incidents<\/span><\/h4>\n\t\t\t\t\t\t

Document a simple procedure: who to alert, how to isolate affected accounts, how to notify users, and how to log evidence.<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

Main Risks<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Phishing<\/span><\/h4>\n\t\t\t\t\t\t

Emails impersonating public institutions (tax office, social services, prefecture); malicious attachments.
Compromise of the trust chain (fake suppliers, CEO fraud).<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Domain Spoofing<\/span><\/h4>\n\t\t\t\t\t\t

Emails sent from collectivite.fr<\/em> without authorization when DMARC is not deployed.
Loss of user trust and spam relay risks.<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t
\n\t\t\t\t\t\t

Ransomware via Email<\/span><\/h4>\n\t\t\t\t\t\t

Malicious macros, links to infected sites, password theft \u279c system encryption.
Service interruption for users and costly remediation.<\/p><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

Recommanded Policies<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

Inbound<\/p><\/div>\n\t\t\t<\/div>

\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
    \n
  • \n
      \n
    • \n

      Mandatory SPF\/DKIM to mark trusted senders<\/p>\n<\/li>\n

    • \n

      Blocking of links to newly created domains<\/p>\n<\/li>\n

    • \n

      Attachment isolation through sandboxing<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

      Outbound<\/p><\/div>\n\t\t\t<\/div>

      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
        \n
      • \n
          \n
        • \n

          DKIM enabled for all sending domains<\/p>\n<\/li>\n

        • \n

          DMARC set to reject<\/strong> on the primary domain<\/p>\n<\/li>\n

        • \n

          Quotas & DLP rules on service mailboxes (data leak prevention)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

          Key Features<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

          \n\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
          \n\t\t\t\t\t\n\t\t\t\t\t
          \n\t\t\t\t\t\t

          Strong Authentication<\/span><\/h4>\n\t\t\t\t\t\t
            \n
          • \n
              \n
            • \n

              MFA \/ 2FA (authenticator app, FIDO2 hardware key, SMS as last resort)<\/p>\n<\/li>\n

            • \n

              Risk-based authentication (suspicious sign-ins, unusual geolocation)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
              \n\t\t\t\t\t\n\t\t\t\t\t
              \n\t\t\t\t\t\t

              Encryption<\/span><\/h4>\n\t\t\t\t\t\t
                \n
              • \n
                  \n
                • \n

                  TLS encryption for emails in transit<\/p>\n<\/li>\n

                • \n

                  End-to-end encryption (E2EE) using S\/MIME or PGP<\/p>\n<\/li>\n

                • \n

                  Encryption of sensitive attachments<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                  \n\t\t\t\t\t\n\t\t\t\t\t
                  \n\t\t\t\t\t\t

                  Anti-Phishing & Anti-Malware Protection<\/span><\/h4>\n\t\t\t\t\t\t
                    \n
                  • \n
                      \n
                    • Detection of phishing \/ spear-phishing attacks<\/li>\n
                    • \n

                      Link and attachment sandbox analysis<\/p>\n<\/li>\n

                    • \n

                      Warnings for unknown or suspicious senders<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                      \n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                      \n\t\t\t\t\t\n\t\t\t\t\t
                      \n\t\t\t\t\t\t

                      Domain Authentication<\/span><\/h4>\n\t\t\t\t\t\t
                        \n
                      • \n
                          \n
                        • \n

                          SPF (Sender Policy Framework)<\/p>\n<\/li>\n

                        • \n

                          DKIM (DomainKeys Identified Mail)<\/p>\n<\/li>\n

                        • \n

                          DMARC (Domain-based Message Authentication, Reporting & Conformance)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                          \n\t\t\t\t\t\n\t\t\t\t\t
                          \n\t\t\t\t\t\t

                          Access & Permission Management<\/span><\/h4>\n\t\t\t\t\t\t
                            \n
                          • \n
                              \n
                            • \n

                              Strengthened password policies<\/p>\n<\/li>\n

                            • \n

                              Session control and automatic time-outs<\/p>\n<\/li>\n

                            • \n

                              Role-based access control (RBAC)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                              \n\t\t\t\t\t\n\t\t\t\t\t
                              \n\t\t\t\t\t\t

                              Logging & Anomaly Detection<\/span><\/h4>\n\t\t\t\t\t\t
                                \n
                              • \n
                                  \n
                                • \n

                                  Access and activity logs<\/p>\n<\/li>\n

                                • \n

                                  Detection of unusual behavior<\/p>\n<\/li>\n

                                • \n

                                  Real-time alerts for potential compromise<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                                  \n\t\t\t\t
                                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                  \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                  \n\t\t\t\t\t\n\t\t\t\t\t
                                  \n\t\t\t\t\t\t

                                  Data Loss Prevention (DLP)<\/span><\/h4>\n\t\t\t\t\t\t
                                    \n
                                  • \n
                                      \n
                                    • \n

                                      Automatic blocking or encryption of sensitive data<\/p>\n<\/li>\n

                                    • \n

                                      Rules preventing unauthorized external sending<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                      \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                      \n\t\t\t\t\t\n\t\t\t\t\t
                                      \n\t\t\t\t\t\t

                                      Backup & Continuity<\/span><\/h4>\n\t\t\t\t\t\t
                                        \n
                                      • \n
                                          \n
                                        • \n

                                          Regular email backups<\/p>\n<\/li>\n

                                        • \n

                                          Protection against accidental or malicious deletion<\/p>\n<\/li>\n

                                        • \n

                                          Fast restoration in case of incident<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                                          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                          \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                          \n\t\t\t\t\t\n\t\t\t\t\t
                                          \n\t\t\t\t\t\t

                                          User Training & Awareness<\/span><\/h4>\n\t\t\t\t\t\t
                                            \n
                                          • \n
                                              \n
                                            • \n

                                              Phishing simulation campaigns<\/p>\n<\/li>\n

                                            • \n

                                              Best practices: passwords, suspicious links, attachments<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>

                                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                              \n\t\t\t\t
                                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t
                                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

                                              Best Practices for Staff<\/p><\/div>\n\t\t\t<\/div>

                                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

                                              \u2714 Enable MFA on all email accounts
                                              \u2714 Verify the real sender, domain, and URL before clicking
                                              \u2714 Never share passwords or codes by email
                                              \u2714 Use a password manager and unique passwords
                                              \u2714 Report suspicious messages using the Report<\/em> button or to the IT team<\/p><\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>

                                              \n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-2417","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2417"}],"version-history":[{"count":3,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2417\/revisions"}],"predecessor-version":[{"id":2420,"href":"https:\/\/www.syredis.fr\/index.php?rest_route=\/wp\/v2\/pages\/2417\/revisions\/2420"}],"wp:attachment":[{"href":"https:\/\/www.syredis.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}