To send an encrypted email to an external user you simply need to add the appropriate wording to the Subject of the message.

1. Create new message in Microsoft Outlook and add the recipients like usual.
2. Enter the following to the beginning of your subject line: #encrypt
3. Then enter the rest of the subject as you would like it to be seen.
   screenshot

    

Information may be intercepted in motion when sending an email to an external stakeholder so attachments must be converted to an Adobe or MS Word or Excel .xlsx password protected file for data with a classification rating of moderate or high for confidentiality before sending an encrypted email to an external stakeholder or emailing a State entity within the ITS domain.

To password protect an Adobe Acrobat Pro PDF file:

1. Save the file as a PDF.
2. Open the PDF.
3. Click on Tools (right side).
4. Click on Protection.
5. Select Encrypt. 
6. Select Encrypt with Password. 
7. Click Yes to change security of the document.
8. Click Require Password to Open Document. 
9. Enter a secure password per the guidelines (last bullet).

To password protect an Excel file (.xlsx only):

1. Select Review.
2. Select Protect Sheet.
3. Enter a secure password per the guidelines below. Excel password protected files must be saved as .xlsx only to meet New York State encryption requirements.
4. Please be sure to select .xlsx when saving the file. Files in the .xls format must be recreated and saved as a new .xlsx file. The .xls format does not meet NYS security requirements and may be hacked.
5. Enter a secure password per the guidelines (last bullet).

To password protect a MS Word files: 

1. Select File. 
2. Select Info. 
3. Select Protect Document.
4. Then select the Encrypt with Password Option”
5. Enter a secure password per the guidelines (last bullet).

Secure Password Guidelines:

• The password should be provided over the phone or in a separate email. With so many email accounts compromised at other entities, it is recommended to transmit the password over the phone if possible.
  
• The password must be changed every 90 days and contain 8 characters of upper/lower case, number, and special characters.

Once you are done creating your message and adding password protected attachments. Click SEND. Be sure you have #encrypt in your subject as that is key! NOTE: You can also do this same process from the Outlook Web Client at {+}https://outlook.office365.com/owa+ when logged in with your nyserda.ny.gov or greenbank.ny.gov user id!

Send a separate, normal (non-encrypted email) to the recipient(s) alerting them that they will be receiving an encrypted email. Below is an example email message:

                      Dear [name],

                       NYSERDA uses encryption by Microsoft Office 365 to securely email Personal, Private, and Sensitive Information (PPSI).  

                       You will be receiving an encrypted email from me  The email Subject will begin with  #encrypt.   Below is a sample encrypted email along with instructions on how to view the message using your Microsoft Account or One Time Passcode.                        The saved attachment will open in your default Web Browser and instructs you to login with your Microsoft Account or select Use a One-Time Passcode to view the message.

                           If you select the One-Time Passcode option, you will instantly receive an email with the code. Enter the code into the web page as instructed

                           Please contact the service desk if you have any questions or issues accessing the encrypted email.  We appreciate your commitment to protecting sensitive information.