Day to Day

202502 – Notice

Posted on February 4, 2025February 4, 2025 by Jared Kallie

04
Feb

Greetings!

2025 is going to be a fantastic year for security as more and more technologies enter our daily lives to further protect your company, employees, and customers.

We wanted to highlight some of the changes you can expect this year and how we will be assisting our clients to be both compliant with compulsory requirements as well as recommended best practices.

1. DMARC Compliance by March 31st
Did you know that cybercriminals can send emails pretending to be from your company? They often use this tactic to trick customers into paying invoices into their own bank accounts by claiming you’ve “changed” your banking details.

This is where SPF, DKIM, and DMARC come to the rescue:
• SPF: Empowers email recipients to verify which systems may send emails on behalf of your company (e.g., Microsoft or Mimecast).
• DKIM: Seals emails sent by your company, ensuring that any intercepted and altered emails are identified by the recipient.
• DMARC: Instructs recipients on what to do with emails that fail SPF or DKIM checks, such as deleting the email before it reaches their staff.

While DMARC is not new, it will become a compulsory requirement from large mail providers and regulatory bodies such as the Payment Card Industry in 2025. Non-compliance could lead to your emails being undelivered to providers like Microsoft, Google, and Yahoo, and PCI imposing fines ranging from $5,000 to $100,000.

Implementing these measures also ensures that your emails seldom end up in your customers’ junk folders, making them more noticeable and harder to miss.
Our amazing Sales Team will be in touch soon to discuss the next steps, and our Technical Team will ensure a smooth implementation with minimal disruption.

2. Enhancing Your Microsoft Security Score
Every minute, teams worldwide monitor and search for new Common Vulnerabilities and Exposures (CVEs) in the applications and devices we use daily.

Microsoft releases an evolving list of Best Practices based on these reports and cybercriminal behaviour. They assign your Microsoft ecosystem a Security Score based on these practices.

To ensure our clients’ safety, we will be making changes to all client tenants to achieve at least a 50% Security Score. This may cause a temporary spike in support hours, but ongoing maintenance should fall within the allocated monthly SLA hours.

WeloveIT has defined over 1,300 checks to help clients achieve an even higher Security Score, further protecting their organizations beyond the minimum recommendations. Interested clients should reach out to our Sales Team for more information about this potential project.

3. Goodbye, Windows 10
It’s hard to believe that Windows 10 is turning 10 years old this year! On October 14th, Microsoft will no longer provide free software updates, technical assistance, or security fixes for Windows 10.

To ensure your company, staff, and hardware remain protected, weloveIT will upgrade all qualifying devices from Windows 10 to Windows 11 before this deadline.

For devices that do not qualify due to unsupported hardware, the weloveIT Sales Team will provide quotes for replacement devices.

We’re thrilled to embark on a secure and successful 2025 with you! Stay tuned as we continue to roll out even more cutting-edge security products throughout the year.

Best regards,
The #weloveIT Team