This project aims to further strengthen the security of all email services, in particular Office 365, by evaluating and implementing the full range of tools available as part of our environment to improve security.

There are practical things we can plan for now such as multi-factor authentication applied to all global admin accounts, reduce the number of Global Admins in favour of more refined roles.   The tools are available in Office 365 but some analysis and consultation is necessary along with careful communications in order to manage the change effectively.

We strive for an excellent security rating because this in turn helps give our users and ultimately the University confidence in our ability to operate secure services.

The Email Working Group are making progressive changes to improve mail in transit protection and whilst these changes will ultimately help prevent spoofing and may reduce some unwanted emails, these measures cannot prevent compromised accounts.