Generic E-mail Filtering Standard
I wrote a generic e-mail filtering standard.
Here’s an excerpt:
3.1 Content Filtering
Employ a content filtering mechanism that scans all incoming e-mail messages and their attachments and manages the messages depending on the results of the scan.
3.1.1 Suspicious Content
Strip suspicious active content (ActiveX, JavaScript, etc.) from e-mail and forward to quarantine.
3.1.2 Prohibited Words
Quarantine e-mails that contain words or phrases that indicate the e-mail is “junk” or “spam”, words in the “Carlin List” and words that are racist, libelous, offensive or obscene.
3.1.3 Outbound Filtering
Protect the organization from possible litigation or loss of sensitive data by implementing outbound e-mail filtering.
3.1.3.1 Quarantine outbound e-mails that contain words or phrases viewed as inappropriate for use in organizational e-mail, including hoaxes and “spam”.
3.1.3.2 Quarantine outbound e-mails that contain words or phrases that indicate sensitive data is leaving the organization.
An archive of the standard is here: E-mail Filtering Standard
Let me know if you have any suggestions!