Organisations should constantly be concerned about the security of their email correspondences. After ~ all, everyone has probably been guilty at the very least once of sending out a post to the wrong human or by chance hitting ‘reply all’.

You are watching: What are two security risks of sending confidential files via e-mail?

If she lucky, her misdelivered message just revealed part mundane organisational processes and leave you emotion embarrassed.

But in numerous cases, the email will certainly contain sensitive info – one of two people in the body of the message or in an attachment, and also this will have actually much more far-ranging consequences than merely leaving friend red-faced.

Depending ~ above the nature the the jeopardized information, it could have significant financial or logistical effects on your business, pose nasty privacy effects for impacted data subjects and expose your organisation come disciplinary activity under the GDPR (General Data defense Regulation). 

Emails space a security risk

For every the convenience the email, the doesn’t offer a lot in the method of security. Professionals often compare it to posting a letter: you create a message, carry out a delivery attend to and hand it turn off to someone to deliver.

This create a collection of dangers in addition to the threat that the message is send come the not correct person.

For example, a cyber criminal might have compromised your account in a phishing scam. V the appropriate access, lock could collection up a system that would forward a copy of any type of email you sent out to one email deal with they controlled, permitting them come spy on her messages.

That means that, even though the vast majority of message you send may be completely innocuous, it only takes one email containing, because that example, a list of client records, for the fraudster to hit the jackpot.

And provided that organisations receive nearly 1,200 phishing emails each day, this is no tiny threat.

Similarly, employers have to be concerned around misconfigurations ~ above their email platforms. One error ~ above the organisation’s email organization could enable a criminal hacker to connect to the email network without authentication and also then send emails seemingly as an employee.

They might do this come ask because that a copy of a perceptible document, or to defraud the organisation – because that example, by requesting the funds it is in transferred into an account the they control.

The threats posed by email are the reason countless organisations still usage fax machines. The technology might be incredibly outdated, yet is has major info security benefits.

It obviously no viable to use fax machines exclusively – or also to usage them anytime you have to transfer sensitive data, no least due to the fact that everyone friend share the details with will additionally need a fax machine, which is ending up being less likely by the year.

However, if you have actually partners through whom you consistently share legal records with, for example, girlfriend might consider faxing this information.

An alternate solution – and also one that’s easier to fit into the existing processes of your organisation and also partners – is come look at brand-new technologies that have the right to strengthen email security.

Encryption and the Cloud

The GDPR no recommend certain technologies (which is does to avoid becoming redundant as new systems emerge), yet it does make multiple recommendations to encryption. This is the procedure of locking information so that only approved customers can accessibility it.

Organisations that handle large volumes of perceptible data, such together the NHS, regularly use encrypted email, and also some organization providers, such as ProtonMail in Switzerland and Tutanota in Germany, offer encryption services.

However, for the majority of businesses, the modern technology will it is in unwieldy because that email. For a start, the bulk of messages don’t contain information that would have to be encrypted, therefore you’re using a most resources unnecessarily.

That’s why the Cloud is, in most cases, a much better option. Individuals can upload attachments to an online folder and also then send recipients a link. Once the details is no longer needed, it have the right to be deleted.

This last action is essential: despite what many people think, the Cloud isn’t an impenetrable fortress that immediately keeps all your info secure. It’s merely a server run by a third party that takes duty for keeping it secure.

However, under the GDPR, both her organisation and also the service provider would certainly be organized to account because that a breach, therefore it’s crucial to remove info as shortly as possible.

Educate employees on the risks of utilizing email



You deserve to reduce the increase of employee breaching information via email by embedding a culture of security awareness throughout your organisation.

Our email Misuse employee Awareness E-Learning food teaches your staff whatever they should know around email security.

See more: Esports Arena 120 W 5Th St Santa Ana, Ca 92701, 120 W 5Th St, Santa Ana, Ca 92701

This rapid course covers the essentials of certain emailing, consisting of refreshers on CC and BCC and how to identify sensitive information in email.