Content library
NSM ICT Security Principles (Norway)
2.8.2: Activate STARTTLS on the organisation’s email server

Requirement description

Activate STARTTLS on the organisation’s email server to authenticate and ensure the confidentiality of all emails between the organisation and other organisations that have activated STARTTLS.

How to fill the requirement

NSM ICT Security Principles (Norway)

2.8.2: Activate STARTTLS on the organisation’s email server

Task name
Priority
Status
Theme
Policy
Other requirements
Activate STARTTLS
Critical
High
Normal
Low
Fully done
Mostly done
Partly done
Not done
Email and phishing
Email and web browser
1
requirements

Examples of other requirements this task affects

2.8.2: Activate STARTTLS on the organisation’s email server
NSM ICT-SP
See all related requirements and other information from tasks own page.
Go to >
Activate STARTTLS
1. Task description

Activate STARTTLS on the organisation’s email server to authenticate and ensure the confidentiality of all emails between the organisation and other organisations that have activated STARTTLS.

STARTTLS is a protocol command used to inform the email server that the email client wants to upgrade from an insecure connection to a secure one using TLS or SSL. This protocol command is used in SMTP and IMAP protocols, whereas the POP3 protocol uses STLS, which is a slightly different encryption command.

Protection of data in transit
Critical
High
Normal
Low
Fully done
Mostly done
Partly done
Not done
Technical cyber security
Encryption
17
requirements

Examples of other requirements this task affects

PR.DS-2: Data-in-transit
NIST
21.2.h: Encryption
NIS2
Article 9a: Protection
DORA
5.1.2: Information transfer
TISAX
9.8 §: Salaus
Kyberturvallisuuslaki
See all related requirements and other information from tasks own page.
Go to >
Protection of data in transit
1. Task description

The data to be transmitted must be protected using cryptographic methods. The protection of the confidentiality and integrity of the data transmitted applies to the internal and external network and to all systems that can transmit data. These include:

  • Servers
  • Computers
  • Mobile devices
  • Printers

The data to be transferred can be protected by physical or logical means.

  • Physical protection is obtained from a protected distribution system, for example an optical fiber line, which has sufficient protection to prevent, for example, electromagnetic leakage and controls to prevent its unauthorized use.
  • Logical protection is achieved with strong encryption of communications.

Tasks included in the policy

Task name
Priority
Status
Theme
Policy
Other requirements
No items found.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.