Automatically Forwarded Email Policy
1. Overview
See Purpose
2. Purpose
To prevent the unauthorized or inadvertent disclosure of sensitive company information.
3. Scope
This policy covers automatic email forwarding, thereby potentially inadvertently transmitting sensitive information by all employees, vendors, and agents operating on behalf of eCuras.
4. Policy
Employees must exercise the utmost caution when sending any email from inside eCuras to an outside network. Unless approved by an employee's manager InfoSec, eCuras email will not be automatically forwarded to an external destination. As defined in the Data Classification and Protection Policy, sensitive information will not be forwarded via any means unless that email is critical to business and is encrypted in accordance with the Acceptable Encryption Policy.
5. Policy Compliance
5.1 Compliance Measurement
The Infosec team will verify compliance with this policy through various methods, including but not limited to periodic walk-thrus, video monitoring, business tool reports, internal and external audits, and feedback to the policy owner.
5.2 Exceptions
The Infosec team must approve any exception to the policy in advance.
5.3 Non-Compliance
An employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.
6. Related Standards, Policies, and Processes
Revised: March 14th, 2018