Case study - Phishing credential entry cut from 19% to 4%
Phishing simulations, DMARC to reject and enforced MFA for a 60 person firm.
- System
- 60 person law firm
- When
- Previous engagement
- Service
- Email and workspace security
Overview
A 60 person law firm wanted to reduce phishing risk without losing legitimate mail.
What we did
Phishing simulations and short training, DMARC moved to reject, SPF flattened, legacy sign-in disabled and MFA enforced for everyone.
Result
Credential entry in simulations fell from 19% to 4%, reporting rose from 5% to 48%, and no legitimate email was lost.
What it touched
- Email security
- DMARC
- MFA
- Credential entry
- 19% to 4%
- Reporting rate
- 5% to 48%
- Legitimate emails lost
- 0