An enterprise receiving email should have procedures to control: