Getting started with Email Security

Moraph resells, implements and runs Proofpoint email security for hospitals, health systems and other healthcare organizations. We configure Proofpoint to filter malicious mail, flag messages that impersonate your executives or vendors, and remove dangerous messages after delivery, and our analysts triage what your staff report. Proofpoint provides the platform; Moraph operates it; your organization decides the policies and whether any incident is a reportable breach.

What it is for

Email is still the most common way attackers reach a healthcare organization. Messages that pose as the CEO asking the CFO for an urgent wire, a vendor announcing new bank details, or an IT notice asking a nurse to sign in again are written to get past people, not just filters. Small security teams often own a capable email platform but lack the time to tune impersonation rules, work the queue of reported messages, pull a bad message from every mailbox it reached, and keep evidence for a breach assessment.

• Executives and finance staff are targeted with impersonation messages that carry no malware for a filter to find
• Reported phishing messages sit in a shared mailbox without anyone triaging them
• A malicious message found after delivery has to be found and removed from every mailbox by hand
• When patient data may have been exposed, the evidence for a breach assessment is scattered

Who uses it

• CISOs and information security teams at hospitals and health systems
• CFOs, finance and accounts payable teams who handle payment and banking requests
• HIPAA privacy officers who assess possible breaches
• Messaging and Microsoft 365 or Google Workspace administrators
• Internal audit and compliance teams who need evidence of email controls

Before you start

• Your organization uses Email Security as a managed platform from Moraph, under an agreement that covers it.
• Licences for Proofpoint, bought through Moraph or under your own agreement with the vendor.
• A Moraph account in your organization for each person who works with Moraph on the service.
• Named technical and security contacts, recorded in the Moraph Portal.

Steps to get started

1. Agree the scope of the managed service for Email Security with Moraph, including which environments and teams it covers.

2. Name your administrators, technical contact and security contact in the Moraph Portal under People and access.

3. Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.

4. Confirm how users will sign in, through your identity provider where the platform supports it.

5. Agree the pilot group and the cut-over plan with your Moraph delivery lead.

Where to go next

• Onboard Email Security
• Everyday tasks
• Connect your systems
• Security, data and compliance
• Troubleshooting and the support guide
• Product overview on moraph.com