Does it Make Sense to Trust your Email Hosting Provider’s Security?

With more and more organizations adopting cloud services such as Gmail Mail and Microsoft Office 365, migrating their mailbox hosting to the cloud, a common dilemma CISOs face is whether to “put all the eggs in one basket”, and trust the hosting provider to protect the mailboxes as well. Most organizational cloud email providers are suited with basic security features, but what about when we REALLY need to make sure our emails are completely safe?

Despite being market-leading players, common cloud service providers seem to fail to secure mailboxes efficiently. Since hosting providers are a main target for hackers, they Lack the ability to provide complementary features which will guarantee Full Encryption and total protection against outside threats along with accessibility from within the organization. Here are some important considerations to keep in mind when keeping our organization’s email safe:

Common providers allow the option for hackers to easily obtain a “testing” mailbox. through it, they will attempt to run malware against the protection engines until eventually it succeeds to breach through into your personal inbox. From there – the way to millions of inboxes is very short.

Large email providers are the primary ideal target for hackers. Hackers have more motivation creating malware which is relevant for and capable of infecting as many mailboxes as possible. Breaching through large providers defense would be the most rewarding, thus the preferred target for hackers. In other words – phishing Hosting Providers is simply fishing where the fish are!

Hosting providers offer various services for their clients. While getting hands on an email account and the contacts it contains may be a nice trophy, Credential Harvesting is most rewarding when it grants access not only to the mailbox, but also to other corporate resources and assets associated with the same Hosting or Cloud Provider.

With so many subscribers, false positives may turn to be catastrophic. Large providers tend to tweak security filters very carefully trying to avoid false-positives. This could potentially come at the cost of security – preferring false negatives (and passing potentially malicious content), over false positives, thus exposing the organization to more security risks.

Enterprise Email Hosting requires great capability in terms of managing parallel sessions of users withing the platform. When a huge number of subscribers ask to sandbox attachments at the same time, Performance may become a serious issue . In such cases, security scanning may take a lot of time, sometimes even up to an hour.

Large providers tend to offer slow and complex interface logging and alerts which normally requires additional subscriptions for extra information and further auditing. This is a big problem when IT resources are limited, or when IT is flooded with various products and interfaces accessed on a regular basis.

Another great value missing among large providers, is the ennoblement to provide insight into both the attack and the attacker to make it easier to prioritize alerts and respond to threats.

Large Hosting Providers do not consistently investigate security incidents. Thus, they don’t offer the same security standard as Intelligence security providers do. It is essential for enterprises to posses a security service which is provided by an Intelligence company, fueled by knowledge of security experts, daily investigating the business world’s breaches and hacks.

Conclusion

No protection is a 100% bulletproof in the cyber world, however – the more layers we add to security, the lower the chances of malicious content passing through. 3rd party security services offer great value for enterprises, both when it comes to operational cost savings and in adding another layer of security. Normally, using feeds from various vendors, these providers are capable of spotting known threats at much higher rates, and identifying unknown threats by sandboxing in an isolated environment.

About the author:

Internet Binat provides communication and information security services to the business sector. Our services include internet access, information security, communication infrastructure administration, WAN networks and server hosting in Israel and abroad.

Protect your corporate secrets

Do you like an Article? Share with professionals!

LEARN MORE ABOUT HOW WE
CAN HELP YOUR BUSINESS
FILL UP THESE GAPS

Please fill in your info:

Recomendations:

Internet Binat is an excellent company with great products and outstanding support.The Network and Security Solutions supported by them are resilient, user friendly, secured with a low and affordable cost.Their support team always gives us high priority and attention

Erez Greenbaum

08:11 10 Sep 19

I am working side by side with Binat an several years, and was constantly amazed with their business insight and brilliant ways to solving problems.We was setup more the 15 MPLS line for our business around the world, which gave the company a significant advantage on top of the competitors.I really hope that our paths will not diverge in the future, and would recommend with all my heart working with Binat Internet and take advantage of their incredible and rare qualities.

Alex Levin

14:27 19 Aug 19

Internet Binat is at the top of WAN services.Adama is working very closely with them for the last couple of years in some very challenging parts of the globe.Without the solutions they provide our job and normal user's productivity around the world would not have been possible.They are professional, committed and above all give superb service !Internet Binat can take you from planning board to execution with flying colors. Strongly recommend?

Roni Barzelai

13:46 19 Aug 19

We get the absolute pleasure of working with Binat Internet for the last 5 years.We are worked on challenging and innovative projects on a global scale.I believe that every organization that would work or interact with Binat Internet will benefit dramatically from that. I want to note the excellent technical round-the-clock support, especially the Israeli team. Team is ready to deal with difficult situations and solve the problems on time.Any of your problems will be solved ASAP.Will be happy to recommend Binat Internet every time, knowing the benefits and attitude they are bringing with them to every project.

Valery Kucher

11:32 18 Aug 19

The excellent company,High professional levelYou always can trust the technical people that help you in any situation.

Igor Vinokur

14:27 14 Aug 19

‹

›