Security News > 2023 > June > Insurance companies neglect basic email security

Only 3.54% of of insurance companies have correctly implemented basic phishing and spoofing protection, according to EasyDMARC. DMARC standard adoption.

The survey reviewed the deployment of the Domain-based Message Authentication, Reporting and Conformance standard among the domains of insurance companies.

First published in 2012, the DMARC standard enables the automatic flagging and removal of receiving emails that are impersonating senders' domains, which is a crucial way to prevent outbound phishing and spoofing attempts.

EasyDMARC's research found that only 22% of the reviewed domains had implemented the decade-old DMARC standard.

Of those 2694 institutions, only 699 had implemented a 'reject' policy that automatically rejects emails imitating a legitimate domain.

594 had configured DMARC to send impersonating emails into quarantine.

News URL

https://www.helpnetsecurity.com/2023/06/23/insurance-companies-basic-email-security/