E-mail Security Control RFI

<p>CAF is seeking an email security solution that blocks spam, malware, and &mdash; most importantly &mdash; phishing attacks. Utilizing computer vision, artificial intelligence, and machine learning to significantly reduce the risk associated with malicious emails. Cyber is one of the highest risks to CAF and as Industry insight state that over 90% of cyber incidents are the result of email based social engineering attacks. Given the culture of charity workers wanting to help, this makes email social engineering a critical vulnerability to CAF and the most likely cause of a significant cyber incident. The management of suspicious emails in line with the risks, has a considerable overhead within the CAF IT Security Team, so CAF needs to adopt a smarter approach to the management of this risk and associated incidents by adopting industry leading, integrated and automated solutions to remove the significant manual effort currently required and reduce the level of risky emails our staff are exposed to. In 2020 CAF transitioned from on premise to M365 Exchange Online which provided configurable native email security capability in M365, however the key risk areas of anti-phishing, phish testing and associated users awareness is not aligned with current risks. While we do not wish to replace the M365 security capabilities already available, we do wish to augment them with an integrated holistic anti phishing solution with brand spoof checking and threat intelligence based filtering to achieve CAFs enterprise email security requirements and alignment to cyber security strategic plans.</p>