Email is still the most common business communication channel — and one of the easiest for attackers to abuse. Encryption encapsulates the message so unauthorized users cannot read it in transit.
Why encrypt
The Verizon DBIR has repeatedly shown a large share of breaches involving phishing. Encryption does not stop every phish, but it does protect the contents of mail that must stay confidential.
Two common methods
- S/MIME — centralized certificates; widely used with Outlook and Apple mail. Sender and recipient must share the method.
- PGP/MIME — public/private keys; more flexible, less universally supported. Webmail usually needs a third-party add-on.
Standardize one method company-wide. In Outlook that typically means a digital ID, signing, then encrypting after the recipient has exchanged a signed message. Pair encryption with SPF, DKIM, and DMARC.
Contact Cyber Security Resource if you need this implemented as part of a security program.