
Security – Backup – Compliance – Security Awareness.

Hornetsecurity, the global expert in email cloud security,
compliance and backup for Microsoft 365.

thumbnail_HornetSecurity.jpg

HornetSecurity.jpg

Hornet Security

Firstly email security is about protecting your organisation from cyber attacks delivered by incoming malicious or spam emails.

Secondly email security is about enabling your organisation to send emails that cannot be spoofed, and have a profile that will be trusted, so that they get delivered to the in-box, rather than get shunted to spam, or blocked as unsafe.  In order to achieve this your SPF, DKIM, DMARC, and BIMI should be configured correctly.

SPF, or Sender Policy Framework, is essential.  If it is not in place, then a cyber attacker can set up a mail server, and start sending spoof emails that look exactly as if they have come from your domain name.

DKIM, or Domain Keys Identified Mail,  is a further protection against the spoofing of your email.  With DKIM setup, your emails will have a "key" that means the recipient can trust them.

DMARC stands for Domain-based Message Authentication, Reporting & Conformance. DMARC is a record on a domain that provides instruction to an incoming mail server, should any emails come in, using that domain, that fail to meet SPF or DKIM standards, how to treat that email (either reject, or send to quarantine).

BIMI or Brand Indicators for Message Identification is a standard that attaches your brand's logo to your authenticated email messages. With this visual verification, recipients can recognize and trust the messages you send.

Email security

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Providing the critical online or face to face training that helps staff protect themselves and the company against cyber crime. 

No matter how good your company cyber security technical defences are, your cyber security posture is weak at best, if you do not have Cyber Security Training in place for your staff.

Cyber security training can include face to face, online video training, awareness questionnaires, and attack simulation, including simulated phishing attacks, where employees are tested with regard  to their ability to spot and report phishing attempts.





Cyber Security Training

The essential service of ensuring that your company retains copies of your online data,  with off line instances and potentially also in parallel, in the event that a cyber attack or systems failure damages or destroys the primary instance of your corporate data. 

Cyber Security and Business Operations best practice mandate that backups are taken of all corporate systems and data.  Backups should be taken  or both on premise and cloud data and systems.  It is essential that the data backup and restore process is tested on at least an annual basis.   Behind the data backup restore process there should be Incident Response Plans, that identify the people, processes, and procedures required in order to respond to any incident, be it cyber attack, systems failure, or natural disaster.

Data Backup and Restore

Providing strategy and consultancy services so that appropriate corporate governance is in place, enterprise risk is managed, and regulations are complied with.

Providing technology platforms that assist with GRC.

GRC - Governance, Risk, and Compliance

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.