A guide for IT managers and systems administrators
Pages
Page 3 of 14
1. Choose an anti-spoofing management tool
Find tools to help assess your email security and anti-spoofing measures, or sign up to the NCSC's Mail Check service.
Implementing controls to secure your domains and emails in transit can generate a lot of data. There are a number of open source and commercial tools available which will help you make sense of this data.
Most of these tools will provide you with information as to whether your DMARC, SPF, DKIM and TLS configurations are correct.
If errors are detected, they often give advice on how to correct the configurations. We recommend you use one of these tools to assess your email security and anti-spoofing measures.
The NCSC Mail Check service
Mail Check is the NCSC’s free platform for assessing email security compliance. It helps domain owners identify, understand, and prevent abuse of their email domains. In particular, Mail Check supports organisations in implementing the following controls:
Email anti-spoofing controls (SPF, DKIM and DMARC): These standards help prevent various attacks (for example, phishing and malware campaigns) that use an organisation's email domain to trick email recipients.
Email confidentiality (TLS): Keeping messages encrypted and private as they are sent over the internet.
Mail Check is available to any UK organisation with a static IP address or domain name. You can sign-up here for free.
Mail Check and risk management
Mail Check is a service intended to support organisations in making their own decisions about how to configure their email security.
Whilst it also helps users understand the security posture of other domains, organisations must make their own risk management decisions about whom they are comfortable exchanging email with.
