Email security involves both the account and the decisions people make after reading a message. A convincing invoice or password request can arrive in an ordinary-looking conversation. Establish a verification process for sensitive actions before an urgent message tests it.
Protect sign-in and recovery
Use business-managed accounts and an approved authentication method. Keep recovery details current and limit administrative access to those who need it. An employee departure should trigger a documented access review, including delegated mailbox access and connected applications.
Ask your administrator how suspicious sign-ins are reviewed and how a compromised account is contained. Employees should know where to report a concern without replying to the suspicious message.
Verify payment and access changes
For a new bank account, unexpected payment instruction, or sensitive data request, verify through an established contact route. Use a known phone number or previously agreed process, not only contact details inside the message being checked.
Build a second approval into high-impact changes where appropriate. Keep the verification record with the transaction so the process is visible. Urgency should trigger the established procedure rather than bypass it.
Review the technical setup
Have the responsible administrator review sending-domain authentication and the services authorized to send mail for the business. Coordinate changes with legitimate senders such as invoicing and marketing systems. Poorly planned changes can disrupt valid mail.
Check how attachments and links are handled, how staff report suspicious messages, and who investigates reports. Avoid treating a spam folder or antivirus subscription as proof that every harmful message will be blocked.
Respond to suspected compromise
Report the incident through your known support channel. Preserve the message and relevant times. Have the administrator investigate account access and business impact, including any payment or data request already acted on.
Use the cybersecurity checklist to connect email protection with device and account controls, or contact Your Expert Tech for help reviewing the setup.