Skip to Main Content
ICBA
ICBA
  • Member Login
  • Member Login

CISA, NSA share Microsoft server security best practices


The Cybersecurity & Infrastructure Security Agency, National Security Agency, and international cybersecurity released Microsoft Exchange Server Security Best Practices, a guide to help network defenders harden on-premises Exchange servers against exploitation by malicious actors.

October 31, 2025 / By ICBA

The Cybersecurity & Infrastructure Security Agency, National Security Agency, and international cybersecurity released Microsoft Exchange Server Security Best Practices, a guide to help network defenders harden on-premises Exchange servers against exploitation by malicious actors.

Details: CISA said:

  • Organizations with unprotected or misconfigured Exchange servers remain at high risk of compromise as threat activity targeting vulnerable servers persists.

  • Best practices include hardening user authentication and access, ensuring strong network encryption, and minimizing application attack surfaces.

  • Organizations that implement these practices can significantly reduce their risk from cyber threats.

Resources for Community Bankers: More cybersecurity resources for community banks are available on ICBA's Cyber and Data Security Resource Center.

Join ICBA Community

Interested in discussing this and other topics? Network with and learn from your peers with the app designed for community bankers. 

Join the community Example Text