Home/Cybersecurity/Email Security
CybersecurityEmail Security and Spam Protection
Most incidents start with an email. Filtering, spoofing protection and the DNS records that stop somebody sending mail as your company.
Email is still where most incidents begin. Not because the technology is weak, but because it is the one system where strangers are allowed to send your staff messages and ask them to do things.
Filtering is only the first layer
A good filter stops the bulk of it. What gets through is the targeted message: a well-written request that appears to come from a supplier, a partner, or the owner of the business. Those are the ones that cost money, and they are usually not stopped by the filter because there is nothing technically wrong with them.
Stopping people sending mail as you
SPF, DKIM and DMARC are DNS records that tell the rest of the internet which servers are allowed to send email on your behalf. Set up correctly, they stop an attacker spoofing your domain to invoice your customers. A surprising number of businesses have these records missing, incomplete, or set to a policy that does nothing.
We configure them properly, monitor the reports, and tighten the policy once we can see nothing legitimate is being blocked.
The last control is a person
Regular short training and simulated phishing give staff practice at spotting the message that got through. It also gives you a measurable number that tends to improve, which is the sort of thing an insurer likes to see.
What email security covers.
