Add domain-authentication work to the email programme
Fortra’s Email Security Advanced tier is documented as the Core layers plus DMARC Protection. Its distinct implementation question is the organisation’s sender and domain-authentication estate. The added function should be selected when the business is ready to inventory legitimate senders and maintain authentication decisions, not merely because it is the next tier.
Map domains and third-party services that send on the organisation’s behalf, including marketing, billing and application notifications. Identify DNS and sending-service owners. Confirm current package composition and the supported deployment for the existing mail architecture before comparing the commercial offer.
Introduce enforcement through a validated sender inventory
A pilot should combine the Core reporting and review path with a staged authentication review. Check legitimate senders before tightening policy, and test how newly onboarded services are approved. A domain policy that breaks authorised business mail can prompt unmanaged workarounds and should not be accepted as a successful security rollout.
Handover should include sender records, domain-policy ownership, exceptions and the process for future changes. For UAE groups with several brands or entities, keep ownership and approvals visible per domain. MMC can scope the chosen components and rollout; external lookalike-domain monitoring should be confirmed against the current Elite offering rather than silently included.
Evidence to request for this scope
- Confirm Advanced entitlements and the particular DMARC service offered.
- Reconcile legitimate senders and validate a staged policy change with their owners.
- Test the suspicious-message review loop and document future sender onboarding.