Common warning signs
What You Will Get
This free guide walks you through the three email authentication records that matter most for your business - in language a non-technical owner-manager can act on. You do not need to become a DNS engineer to understand how to ensure your email communication is secured.
That does not automatically mean your domain is protected from impersonation.
If you have been told "you need to set up SPF" by someone and do not know what that means, or whether you have actually done it correctly — this guide is for you.
Deliverability Problems
Genuine emails may land in junk, be delayed or treated with suspicion by recipients' email systems.
Domain Spoofing:
Criminals can send emails that appear to come from your business, damaging trust with customers and suppliers.
Audit Gaps
Cyber Essentials-style assessments increasingly expect documented email authentication policies.
The NCSC describes SPF, DKIM and DMARC as controls that make fake emails harder to send from an organisation's domains. For SMEs, the risk is practical: your invoices land in spam, your domain gets abused for phishing, and you may fail an audit because you cannot evidence email authentication.
Why Microsoft 365 alone does not prove email authenticity.
The business risks: deliverability, phishing and audit exposure.
SPF, DKIM and DMARC explained in plain English - with real SME examples.
Common SME gaps to check - SPF, DKIM and DMARC.
How to roll out DMARC safely: monitor, fix and then tighten.
What to ask your IT provider or Microsoft 365 administrator (15 questions).
A 10-point email security ownership checklist with evidence notes.
Download Your Free Email Security Checklist
The guide is a printable PDF that you can work through at your own place. It takes about 20 minutes and gives you a document you can take to any provider - or use to pressure-test the one you already have.
Do I need technical knowledge to use this guide?
No. The guide is written for owner-managed SMEs who are not IT-literate. Every technical term is explained in plain English, and the worksheet uses simple status options like "Unknown", "Not in place", or "Done".
Is this guide specific to Microsoft 365?
The guide covers SPF, DKIM and DMARC broadly, but uses Microsoft 365 as its primary example since most of our readers use it. The principles apply to any email platform.
Does this guarantee Cyber Essentials certification?
No. Email authentication is not a guaranteed Cyber Essentials pass or a specific standalone requirement unless your current assessor says so. The guide maps authentication records to CE readiness as a defensible part of your wider security baseline, without making certification claims.
What happens after I download the guide?
You get the PDF instantly. If you work through it and find gaps, you can book a free Security Triage Call to discuss your findings with Infinite Cloud IT. There is no obligation.
I am in Kent. Can you help with our specific setup?
Absolutely. The guide is designed to be useful wherever you are, and we regularly work with SMEs across Kent and the South East. Book a free Security Triage Call to discuss your domain specifically.
