Guide area 03
Email & Phishing
Mailbox protection and calm workflows for suspicious messages.
Guides
5 guidesA Business Email Security Baseline for Small Teams
Build a practical email-security baseline that separates domain, account, and human-process controls while keeping ownership, evidence, gaps, and escalation visible.
Plan a DMARC Rollout Without Breaking Legitimate Mail
Document senders, authentication evidence, delivery dependencies, authorization, and rollback readiness before proposing any live DMARC change.
Prepare the First Actions for a Suspected Mailbox Compromise
Prepare roles, safe communication, evidence ownership, decision authority, continuity, and qualified handoff before mailbox compromise is suspected.
Verify Payment-Change Requests Before Money Moves
Hold changed payment instructions until identity, authority, commercial approval, payment authorization, and evidence are independently verified.
Build a Phishing Reporting Workflow People Will Use
Build a safe, low-friction workflow for reporting suspicious messages, acknowledging reports, escalating uncertainty, giving feedback, and learning without blame.