CIRLET | Email exception review

Use one copy for each exception. Ask the person who manages your email to
check the actual rule with you. If another provider filters your mail too,
include its settings in the review.

Don't put customer records, email messages, passwords, recovery codes or
private screenshots here. Use an internal reference instead of a sender
address, domain or IP address. Keep the actual rule details in your agency's
approved records.

Review date: _________________________________________________
Rule reference and where the details are kept: _________________
______________________________________________________________
Provider and policy or list: __________________________________
______________________________________________________________
What does it affect? Which mailboxes or roles? _________________
______________________________________________________________
Which checks does it bypass? Ask the provider. _________________
______________________________________________________________
Why was it added? Is that reason still current? ________________
______________________________________________________________
Who confirmed the sender or service, and how? __________________
______________________________________________________________
Expiry, if any, or next review date: ___________________________

Decision: [ ] Keep  [ ] Change  [ ] Remove  [ ] Still deciding
Decision owner: _______________________________________________
What will the provider do next? ________________________________
______________________________________________________________
How will you test legitimate delivery and check for blocked mail?
______________________________________________________________
Test result or what is still unknown: ___________________________
______________________________________________________________
Follow-up owner and date: ______________________________________

An unanswered question is unknown, not proof of a problem. This record
doesn't tell you whether an exception is safe. Review changes with your
email provider before making them.

Guide: https://aicybersecurityforinsuranceagencies.com/guides/email-exception-review