SI-8 Spam Protection
Review SI-8
1. Set its parameters
No parameters to set for SI-8.
2. Record its status
a.Employ spam protection mechanisms at system entry and exit points to detect and act on unsolicited messages; and
b.Update spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures.
Discussion
System entry and exit points include firewalls, remote-access servers, electronic mail servers, web servers, proxy servers, workstations, notebook computers, and mobile devices. Spam can be transported by different means, including email, email attachments, and web accesses. Spam protection mechanisms include signature definitions.
Enhancements
Review SI-8(2)
1. Set its parameters
No parameters to set for SI-8(2).
2. Record its status
Automatically update spam protection mechanisms [Assignment: organization-defined frequency].
Discussion
Using automated mechanisms to update spam protection mechanisms helps to ensure that updates occur on a regular basis and provide the latest content and protection capabilities.
Review SI-8(3)
1. Set its parameters
No parameters to set for SI-8(3).
2. Record its status
Implement spam protection mechanisms with a learning capability to more effectively identify legitimate communications traffic.
Discussion
Learning mechanisms include Bayesian filters that respond to user inputs that identify specific traffic as spam or legitimate by updating algorithm parameters and thereby more accurately separating types of traffic.
No Enhancements match this Baseline.
ISO/IEC 27001:2022 Crosswalk
No ISO 27001 mapping published for this control.