Firms outsource new email security measures implementation

A recent study shared by email security provider, EasyDMARC, sheds light on the significant challenges organisations face while trying to comply with new email authentication protocols being rolled out by Google and Yahoo.

The research reveals that a majority of IT decision-makers (54%) prefer outsourcing Domain-based Message Authentication, Reporting & Conformance (DMARC) implementation due to a lack of in-house expertise and resources. At present, only 37% of organisations are compliant with the new email security measures, indicating a prominent need for external support.

The decision by Google and Yahoo to implement these changes came as part of a broader initiative for enhanced email security to prevent phishing and spoofing attacks. The platforms are now temporarily rejecting non-compliant emails in anticipation of full enforcement by June 2024. The shake-up in protocols posed by these changes has created a significant opportunity for Managed Service Providers (MSPs) to offer their specialised services for DMARC and related protocols, thus ensuring compliance and bolstering the security of email communications.

The research was informed by a survey of 1,000 IT decision-makers across the US, UK, Europe, and Oceania to understand their awareness and implementation strategies towards the requisite email protocols. Despite the urgent need for compliance, only 37% of organisations were found to adhere to the updated requirements, and a mere 28% of IT decision-makers would conduct the necessary changes by themselves. Crucially, over half (54%) reported wanting to outsource implementation to an IT provider, consultancy, or specialist service.

When factoring in strategies for implementing email authentication, 51% of decision-makers expressed a preference to rely on their IT provider or a consultancy to implement DMARC, while 15% planned on using a specialist service for the technical aspects of the protocol. As a result, it became evident that two-thirds (66%) of businesses would outsource implementation, while only one-third (34%) chose to manage the required changes internally.

The study also revealed a prevailing lack of confidence among IT decision-makers in implementing email authentication tools, primarily due to the complexity of deployment - a significant barrier noted by 40% of respondents. This points to a critical shortage of knowledge and resources hampering organisations from implementing the necessary standards, which EasyDMARC suggests has created an "enormous opportunity for Managed Service Providers to become indispensable allies".

Mike Anderson, Global Channels Director at EasyDMARC, responded to the research: "By offering expertise and implementation services for DMARC and related protocols, MSPs can alleviate these burdens for businesses. Not only does this enable organisations to navigate the complexities of compliance smoothly, but it also opens avenues for MSPs to introduce additional services. With more businesses ready to seek external help as compliance deadlines continue to pass, now is a strategic moment for MSPs to expand their services and reinforce their role as essential security partners."