• Network security
  
• Access controls
  
• Authentication
  
• Encryption
  
• Logging
  
• Monitoring and alerting
  
• Pre-planning coordinated incident response
  
• Forensics
  

• They have reviewed quarterly and annual financial reports;
  
• The information is complete and accurate;
  
• Effective disclosure controls and procedures are in place and maintained to ensure that material information about the company is made known to them.
  

• A capable policy enforcement mechanism to set rules in accordance with each company’s systems of internal controls;
  
• Encryption capabilities to ensure privacy and confidentiality through secure and authenticated transport and delivery of email messages;
  
• Secure remote access to enable remote access for authorized users while preventing access from unauthorized users;
  
• Anti-spam and anti-phishing technology to prevent malicious code from entering a machine and to prevent private information from being provided to unauthorized parties
  

• Viruses, worms, and other malicious code
  
• Internal users and external hackers attacking email systems
  
• System failures from malicious attacks that can lead to subsequent legal liabilities
  
• Unintentional or malicious information access or exposure
  

About the Author

CipherTrust is the leader in anti-spam and email security. Learn more by downloading our free whitepaper, “Contributing to Sarbanes-Oxley Compliance with IronMail” or by visiting www.ciphertrust.com.