DMARC is a custom DNS record in your public DNS zone file that tells receiving email systems how to treat…
email security expert for hire | secure your email system
Hire my expert consulting services to improve your email system security. Rob Walton is Microsoft qualified, with over 30 years experience in email systems, email migrations, and SMTP messaging security.
Effective email security requires constant review & improvement to protect against evolving cyber threats to your business.
Many of the best email security measures available cost less than you think. Especially when compared to the cost to your business following a successful cyber attack.
Email remains one of the most frequently targeted routes into an organisation. I provide independent email security consulting for businesses that need specialist help protecting Microsoft 365, Exchange Online and internet email services against phishing, business email compromise, impersonation, account takeover and data loss.
My work combines more than 30 years of enterprise email-system experience with current Microsoft 365 cyber-security expertise. I can review Exchange Online Protection and Defender for Office 365, anti-phishing controls, Safe Links and Safe Attachments, Entra ID authentication and Conditional Access, Microsoft Purview DLP, mailbox and mail-flow configuration, and the security posture of your email domains.
Email authentication remains a critical part of that defence. I assess and harden SPF, DKIM and DMARC, including progression to DMARC p=reject, and can review newer transport and domain-security controls such as DANE, DNSSEC and MTA-STS. The objective is not simply to pass an online DNS test, but to reduce practical opportunities for domain spoofing, impersonation and fraudulent email delivery.
For organisations that want a clear starting point, I provide an Email Security Assessment Report identifying weaknesses, risks and prioritised improvements. I can then assist with implementation or work alongside your internal IT and security teams. I also undertake deeper Microsoft 365 cyber-security reviews and can assist with BEC and compromised-account investigations where forensic analysis is required.
Request an Email Security Assessment Report today
An email security assessment will cost $1,000 USD
You can hire my email security expert services to help to make any of the suggested improvements.
Ask about a more detailed Cyber Security Review of your Microsoft Office 365 Tenant.
Does your CIO or CISO role need any email security expertise – get in touch to discuss.
Ask how to leverage M365 Purview for Data Loss Protection policies, and email classifications.
SPF DKIM DMARC Email Authentication Review
Ensure SPF, DKIM, and DMARC (Reject Mode) are fully hardened for all your email domains.
This has no cost, and if configured properly provides a significant defense against email attack and email impersonation.
DANE DNSSEC MTA-STS Email Protection
Stay up to date with the latest email security protection standards.
Once you have SPF, DKIM, DMARC fully deployed, you should also upgrade to DANE DNSSEC and MTA-STS.
Exchange Online Data at Rest Encryption
If you are using Exchange Online, you have the option to further encrypt your mailbox data with a private key.
Use BYOK technology as part of M365 E5 to secure your mailboxes.
Microsoft Defender for Office (MDO)
Ensure your MDO policy set is optimised to ensure the highest protection for your Outlook users. MDO has a large set of email security policies that collectively can enhance your email security baseline. The level of features available depends on the license assigned to the user.
Exchange Online Protection (EOP)
EOP is the email gateway product that is part of the M365 Tenant for Exchange Online.
Safe Links
M365 MDO provides a Safe Links policy that provides protection for URLs in a received email. Custom settings can be applied.
Safe Attachments
M365 MDO provides a Safe Attachments policy that provides protection for attachments in a received email. Custom settings can be applied.
Anti-Phishing Policy
M365 MDO provides an anti-phishing policy with many protection levels available, including for VIPs.
BEC Fraud
A major risk to most organisations, with the risk of loss of hundred of thousands of dollars. A combination of MDO policies, device policies, and user education can all help mitigate the risk.
Entra Conditional Access
M365 Entra allows for complementary policies for the device and identity. One protection measure to consider is to force users to always use a trusted work device for M365 access. This will prevent a malicious actor from using stolen credentials.
Email Security Expert – Blog Posts
Request an Email Security Assessment Report
Hire an email security expert to review your email security posture. Rob Walton is a qualified, experienced, email security expert…
Encrypt Exchange Online Mailboxes with BYOK
Encryption for Exchange Online Mailboxes Exchange Online mailbox data encryption can be increased beyond the default Microsoft provided level. When…
Capture DMARC Reject Email Copies
Use DMARC to Protect your Email System It is recommended to ensure you have the highest SPF, DKIM, and DMARC…
Email Impersonation Protection for Unused Email Domains
Protect Unused Email Domains Against Cyber Attack Organizations usually own a large number of email domains, for brand protection reasons….
Review Older TLS Versions and Cipher Suites
Prepare for TLS 1.3 Support for Mail Transport TLS 1.3 support is becoming prevalent across messaging platforms as we enter…
Prepare for Microsoft Exchange SE | End of Support for Exchange 2016 & 2019
Prepare for Exchange SE RTM Microsoft have announced a set of important dates for end of support for both Exchange…
DANE DNSSEC for M365 Exchange Online
DANE DNSSEC Email Security Planning Microsoft have released support for DANE and DNSSEC to improve the email security of your…