Email is universal, critical to modern business and inherently insecure. Created long before the internet was mainstream, email was never developed with privacy or security in mind. In the 45 years since, it has become an essential pillar of modern business communications—and a magnet for all kinds of attacks.

Every day, billions of emails reach users’ inboxes. Most are benign. Many are nuisances. Some are important. And all too many are dangerous. Fully protecting your organisation against these threats requires more than one layer of defence.

The good news: you can use attackers’ tactics against them. By making email reporting and remediation key parts of a multilayered defence, you can transform every potential victim into a defensive choke point.

This e-book explains how to teach users to recognise and report suspicious emails—without creating needless work by forcing IT and security teams to chase down false alarms. It includes new research into user behaviour around simulated email threats. It also explores ways of getting more users to report suspicious emails. And it maps out practical steps you can take to streamline your response to suspicious email reports while helping users get better at discerning real threats.