Email attacks in SMEs

Set SPF, DKIM and DMARC, then train staff monthly with short phish simulations.

Tip: Track click-to-report ratios to show improvement.