PRACTICAL WORKBOOK
Email and phishing: combine tools with a reporting process
Reduce the chance of malicious attachments and links reaching devices.
01 / Define the scope
02 / Check and Record Evidence
Confirm the scope first, then expand each item to check it. For 'Completed', enter an owner and evidence; for 'Not applicable', enter a reason. Progress reflects record status only, not a security score.
Data is processed only on this page and is not uploaded or saved automatically. Before leaving, download the HTML and confirm it has been saved; open that file later to continue. Do not enter passwords, verification codes or complete sensitive configurations.
Expand one item to focus on it, or view all items at once. Printing includes every item.
Check email filtering, attachment and URL protection settings
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Create a simple process for reporting suspicious email
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Make sure employees know how to verify unusual payment or account requests
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.