Email hardening

Stop email threats before they affect your business

Email systems are a primary entry point for cyber threats such as phishing, malware delivery, and unauthorised access. Weak email security can expose organisations to significant risk. Strengthening email services involves putting in place essential security controls and best practices to better protect users, systems and sensitive information. Hardening email environments reduces the risk of compromise and limits the impact of cyber incidents. Strong email security is critical as cyber threats continue to evolve in scale and sophistication.

Recognise and respond to email-based threats

Learn how to identify socially engineered and malicious messages, reduce their impact and protect your organisation against business email compromise.

Detecting socially engineered messages

Learn how to protect yourself from social engineering messages sent via email, SMS, instant messaging and social media.

Malicious email mitigation strategies

Learn how to reduce the risk of malicious emails by using security controls and cyber security practices that protect users, systems and sensitive information.

Protecting against business email compromise

Learn how to reduce the risk of business email compromise by strengthening email security, verifying requests and protecting accounts.

Authenticate and protect email communications

Use email authentication, certificates and encryption to reduce fake emails and protect information sent between systems.

How to combat fake emails

Learn how to protect your organisation from faked and malicious emails by identifying warning signs and using technical controls to reduce risk.

Implementing certificates, TLS, HTTPS and opportunistic TLS

Secure web and email traffic by using certificates and Transport Layer Security (TLS) to protect data in transit and prevent unauthorised access.

Secure email services and platforms

Access guidance for securely configuring email platforms and using providers that send or filter email on behalf of organisations.

Marketing and filtering email service providers

Learn how both marketing and filtering email service providers can improve email security, reduce malicious messages and support trusted communications.

Microsoft Exchange Server security best practices

Learn how to secure Microsoft Exchange Server by using security best practices to reduce vulnerabilities, protect email services and prevent unauthorised access.

What are you looking for?

Stay secure

Guidance

Resources

Access publications and alerts

Publications

Alerts, advisories and reports

Recover from a cyber incident

How to recover

Where to get help

Submit a report

Report an issue

Regulatory reporting

What we do

About us

News and programs