Skip to content

Business Email Compromise

What is Business Email Compromise?

A sophisticated scam targeting organisations that conduct wire transfers or handle sensitive financial data. Attackers impersonate executives or trusted partners to trick employees into transferring funds or disclosing confidential information.

Information Security

Frameworks that govern business email compromise

PCI DSS v4.0View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on business email compromise

Requirements naming business email compromise across 3 standards, quoted from the control text.

Australian Information Security Manual1 control

Personnel dealing with banking details and payment requests are advised of what business email compromise is, how to manage such situations and how to report it.

ISM-1740 · Personnel dealing with banking details and payment requests are advised of what business e →
Israel Protection of Privacy Law (5741-1981)1 control

Incident response and breach notification governed by Section 32A POPL + Article 11 of Data Security Regulations 5777-2017 + Amendment 13 reinforcement.

IsraelPPL-Incident-Response-Breach-Notification-PPA-Affected-Customers-Section32A-DSR2017-24Hours · Israel POPL Incident Response + Section 32A Severe Security Incident Notification + Data Security Regulations 2017 Article 11 + PPA Notification + Affected Customers + 24-72 Hour Window + Amendment 13 Enforcement →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.7 Threat Detection and Security Monitoring - 24/7/365 Security Operations Centre (SOC) capability internal or via Managed Security Service Provider (MSSP) + Security Information and Event Management (SIEM) covering identity + network + endpoint + c...

LLOYDS-MS11-Threat-Detection-Security-Monitoring-Email-Phishing-Defences-MS11-7-12-SOC-EDR-XDR-SIEM · Lloyds MS11 Threat Detection + Security Monitoring + Email + Phishing + MS11.7-12 →

Questions people ask about business email compromise

What is Business Email Compromise?
A sophisticated scam targeting organisations that conduct wire transfers or handle sensitive financial data. Attackers impersonate executives or trusted partners to trick employees into transferring funds or disclosing confidential information.
Why is Business Email Compromise important for compliance?
Business Email Compromise is a key concept in Information Security. Understanding business email compromise helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Business Email Compromise?
Business Email Compromise appears in the requirement text of Australian Information Security Manual, Israel Protection of Privacy Law (5741-1981), Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Email Compromise?
Explore our compliance framework pages to see how business email compromise applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Business Email Compromise applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.