Topic starter
02/08/2026 11:52 am
TL;DR: 68% of breaches stem from mistakes, a figure KnowBe4 cites from survey evidence on financial services email risk. Email governance has to account for user actions, because filtering alone will not catch unsafe disclosure or delegated access failures.
Editorial analysis by NHI Mgmt Group, based on content published by Knowbe4: “The 3 Biggest Email Security Challenges Facing Financial Service Organizations”.
By the numbers:
- 90% of outbound email security incidents go undetected by traditional systems, according to Knowbe4.
Key questions
Q: Why does outbound email create such a large governance gap for financial firms?
A: Outbound email is where accidental disclosure becomes business impact, but many controls are still tuned to inbound threats.
Q: What are the signs that email governance is failing in an enterprise?
A: The clearest signs are excessive shared mailbox access, stale delegation rights, unexpected forwarding rules, weak review records and inconsistent handling of privileged inboxes.
Q: What breaks when email security is not aligned to human risk in financial services?
A: The main failure is that traditional filtering and malware detection do not stop legitimate users from making unsafe email decisions.
Practitioner guidance
- Tighten controls on risky send actions Apply approval, warning, and review workflows to external forwarding, bulk sends, and messages containing regulated data so that unsafe decisions are interrupted before delivery.
- Monitor outbound disclosure paths Extend detection to outbound email, attachment sharing, and forwarding chains so the programme can see where sensitive information actually leaves the organisation.
- Map third-party mailbox access Inventory delegated inboxes, shared mailboxes, and external collaboration paths, then define who can approve, send, and retain sensitive communications.
Bottom line: Financial services email incidents often begin with ordinary user behaviour, which means prevention has to extend beyond filtering and malware detection.
Glossary terms: Outbound Email Monitoring, Human Risk Management, Delegated Mailbox Access, Email Governance
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 2 days ago by NHI Mgmt Group
02/08/2026 1:01 pm
Email security in financial services is now a governance discipline, not a mail-filtering discipline. The article’s core point is that traditional controls miss the way modern email risk actually materialises: through human error, trusted communication paths, and policy gaps. That shifts the problem from threat blocking to control design across identity, access, and information handling. Practitioners should treat email governance as part of the security operating model, not as a separate IT nuisance.
A question worth separating out:
Q: How should financial organisations govern third-party email access and collaboration?
A: They should treat external mailboxes, delegated inboxes, and shared communication channels as controlled access routes. That means defining ownership, enforcing lifecycle offboarding, and applying the same review discipline to third-party communication paths that they apply to other privileged access. Without that, collaboration becomes an unmanaged disclosure channel.
👉 Read our full editorial: Email security gaps in financial services are now governance failures