Go to your ISP's (internet service provider) website, there is usually a link where you can login to your account with them where you should be able to maintain your account and setup additional e-mail addresses. Most providers allow you to have at least 5 different e-mail addresess.
Or get him a webmail address. If you currently check yours using Outlook (or *any* similar program that you run on your PC) then it's really only as safe from viruses as the settings that you've decided upon.
With an address from hotmail or gmail (I still have 8 invites if anyone wants to email me for one of those : my username here... @gmail.com) they scan incoming emails for any nasties.
Gmail and hotmail also both have notifiers that will tell you that a new mail has arrived.