SOX, risk assessments, security policies, incident response
A DMARC record parked at p=none is a smoke detector with the wires cut. The federal government proved enforcement works when phishing delivery dropped from 69% to 14% after BOD 18-01. Here’s the methodical path from monitoring to actual protection.
Your CEO’s email lands in your CFO’s inbox — SPF passes, DKIM passes, no external banner, no red flags. Except your CEO didn’t send it. Here’s how attackers weaponize Microsoft 365’s Direct Send feature to impersonate internal users, why traditional defenses fail, and the five mitigations that actually stop it.
