Versions Compared

Old Version 4

changes.mady.by.user Rebecca R. Gagnon

Saved on

compared with

New Version Current

changes.mady.by.user Alexander Yeh [X]

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Aura - Title
color#0073a4
textAlignleft
fontSize28
lineHeight28
cloudTextDemo Title
tagh1
fontWeightbold
Outlook: Sending Secure Encrypted Email

Aura - Divider
serializedStyles{"alignment":{"horizontal":"start"},"icon":{"name":"faPaperPlane","color":"#333","size":24},"text":{"color":"#333","fontSize":14,"textAlign":"left","fontWeight":"bold","text":"Aura Divider"},"border":{"top":false,"right":false,"bottom":true,"left":false,"color":"#0073a4","style":"solid","width":2},"size":{}}
typeregular

Info
iconfalse

This page details how to

...

PURPOSE

...

allow users to securely send email messages and attachments to external users without installing PGP Client Software.

SCOPE

...

: All NYSERDA Users

RESPONSIBILITIES:

  1. IT Operations Systems Administration is responsible for User Account and Mailbox Administration
  2. All users are responsible for knowing the Data Classification for any information and/or files being shared both within and outside of NYSERDA and assuring this information is properly secured in accordance with that classification.

*Contact Data Governance for more details on Data Classification

...

Tip
iconfalse

Sending Secure, Encrypted Email from Outlook has been made very easy for NYSERDA users now on the Office 365 email platform.

UI Steps
sizesmall
UI Step
To send an encrypted email to an external user you simply need to add the appropriate wording to the Subject of the message.
  1. Create new message

...

  1. in Microsoft Outlook and add the recipients like usual.
  2. Enter the following to the beginning of your

...

  1. subject line: #encrypt
  2. Then enter the rest of the subject as you would like it to be seen.
    Expand
    titlescreenshot

     Image Modified

...

UI Step
Information may be intercepted in motion when sending an email to an external stakeholder so attachments must be converted to an Adobe

...

or MS Word or Excel .xlsx

...

In addition, the password for the file should be provided to the recipient over the phone or sent in a separate encrypted email.

...

password protected file for

...

data with a classification rating of moderate or high for confidentiality before sending an encrypted email to an external stakeholder or emailing a State entity within the ITS domain.

Excerpt Include
Password and Security
Password and Security
nopaneltrue

UI Step

Once you are done creating your message and adding password protected attachments.

...

 Click SEND

...

. Be sure you have #encrypt in your subject as that is key!

...

 NOTE: You can also do this same process from the Outlook Web Client at {+}https://outlook.office365.com/owa+ when logged in with your nyserda.ny.gov or greenbank.ny.gov user id!

...

DATA LOSS PROTECTION (DLP)

...

UI Step

Send a separate, normal (non-encrypted email) to the recipient(s) alerting them that they will be receiving an encrypted email. Below is an example email message:


                      Dear [name],

                       NYSERDA uses encryption by Microsoft Office 365 to securely email Personal, Private, and Sensitive Information (PPSI).  

                       You will be receiving an encrypted email from me  The email Subject will begin with  #encrypt.   Below is a sample encrypted email along with instructions on how to view the message using your Microsoft Account or One Time Passcode.Image Added                        The saved attachment will open in your default Web Browser and instructs you to login with your Microsoft Account or select Use a One-Time Passcode to view the message.

Image Added                           If you select the One-Time Passcode option, you will instantly receive an email with the code. Enter the code into the web page as instructed


                           Please contact the service desk if you have any questions or issues accessing the encrypted email.  We appreciate your commitment to protecting sensitive information.

Data Loss Protection 

Info
iconfalse

Data Loss Protection (DLP) to prevent unprotected sensitive information in outgoing email.  NYSERDA’s Data Governance Council have agreed to enforce the least disruptive action known as the DLP encryption template.  This encryption template is effective immediately.

The DLP encryption template effects emails and attachments that contain:

  • Social Security Number
  • US Taxpayer ID
  • Passport Number
  • Credit Card Number
  • Bank Account Number (personal and business)

Since NYSERDA users the centralized Office 365 system, our emails are already encrypted therefore this automatic encryption will not affect the following communication:

  • Emails to @nyserda.ny.gov
  • Emails to other NYS entities that are O365 tenants at ITS.  Note that being listed in the global address list (GAL) does not guarantee a state entity is participating in the ITS O365 tenant.

Receiving the email works the same as utilizing #encrypt referenced above.

HTML
<style type="text/css">
#title-text { display: none;}
</style>