SPF, DKIM and DMARC: stop attackers from sending email in your company's name
Fake invoices and "urgent" messages from the director are among the most common attacks. Three DNS records make them much harder.
Read articleSmartphones have become a full work tool: email, messengers with clients, shared documents, banking and the MFA codes that protect everything else. A lost or compromised phone can therefore expose much more than personal photos.
Basic rules for every phone
- Screen lock with a PIN or biometrics and automatic locking.
- Regular updates of the operating system and apps; replace phones that no longer receive updates.
- Apps only from official stores; be careful with permissions.
- Find-my-device and remote wipe enabled.
- Do not click links in unexpected SMS and messenger messages.
For the company
- Decide whether employees use company phones, personal phones (BYOD) or both, and write simple rules.
- Use mobile device management (MDM) to enforce encryption, screen lock and remote wipe of company data.
- On personal devices, keep company data in managed apps that can be wiped without touching personal content.
- Have a clear procedure for lost devices: who to call and what is blocked.
The phone in your pocket is a computer with access to the company. Treat it like one.
Need help with this? Contact CySec for a free consultation.