Block legacy auth, number matching, MFA fatigue. No SMS codes. Conditional Access SA only, impossible travel blocked.
Every link rewritten at click time, attachments detonate in sandbox before delivery. Stops phishing even if user clicks.
SPF, DKIM, DMARC + anti-spoof, anti-impersonation for CEO names. Blocks ceo-fraud R87k invoice scam.
Block ID numbers, bank details leaving, encrypt sensitive client docs. POPIA Condition 7 compliant + retention.
M365 Security Checklist 2026 + POPIA email checklist PDF. Same controls we use for 5-50 staff. Direct download - no email required.
📄 Download PDF Direct →