Teach staff to recognize suspicious payment requests, verify changes through trusted channels, and report questionable messages without putting company accounts at risk.

Review authentication, account access, forwarding rules, and core email settings to reduce the risk of account takeover and data exposure.

Create a clear process for reporting suspicious emails, containing exposure, and helping staff respond confidently to phishing attempts.