Cyber Security – Email Security
Studies suggest the most common method for end-user compromise is via email. This is our key focus on the cyber security front as traditional ransomware attacks were generally from exposed ports or unsecure web servers, nowadays most companies have secured these backdoors. Surprisingly though many companies don’t utilize basic security practices and rely on the ‘built-in’ Anti-spam of there mail platform.
At Goldfield we’ve partnered with some great partners to offer tailored security for any business whether it’s a SOHO or a large enterprise corp. Much like Anti-Virus though we are moving away from the traditional SEG Gateway filters and utilizing AI-driven & API-driven spam filtering. Unlike most filters, this also allows for ‘internal’ email to be checked and allows leverage of some great tools such as ‘sender relationship strength’, ‘Name impersonation checks’, ‘AI-Model and textual Analysis’, ‘Live-Sandboxing’ and many more features.
We at Goldfield believe the following measures should be in-place as a minimum;
- Multi-Factor Authentication / Conditional Access Applied to all users.
- Legacy Authentication should be disabled.
- SPF record should be present, with a hard fail.
- DKIM & DMARC Records should be present and configured correctly.
- A spam filter with advanced threat protection should be in-place to scan all email, regardless of direction. (Inbound / Outbound / Internal)
Feel free to contact one of the team for more information or how we can help you secure your email environment.