
This is why you need to have the appropriate safeguards in place to lessen the likelihood of falling victim.
The vast majority (95% or more) of emails you receive are from someone outside of your organization. So simply putting a message header indicating to the end user that hey this email came from outside your organization is doing them no favors. Actually, it is just conditioning them to not pay attention to it because almost every email has it. This is why leveraging solutions with contextual awareness are of significant value. You only want to let the user know when they truly need to pay attention and spend an extra second or two on the email before taking any actions.
This is basically coaching the user in real time to make a more informed decision prior to taking any actions on the email. Let's imagine you just received an invoice from your cleaning service company. You receive this bill every month and every time it comes in at the top of the email it says "External - This email originated from outside your organization". You completely ignore the message because it is always there and make the payment for this month's service. Unbeknownst to you that invoice was not from your cleaning service company, but it sure looked like it did. A behavior email security solution like Inky would have recognized the invoice wasn't from the regular cleaning company and would have presented an orangish yellow banner that said "Caution: First Time Sender" and "Newly Registered Domain" giving you valuable information you need prior to making a decision. If that message was from your real cleaning services company, it would have come in with a standard gray banner with no warning messages.
It is very important to leverage these types of banners on both inbound and internal emails.
If you want to learn more about Inky, we would be more than happy to show you how it works as we use this in our managed services for email security and are an authorized reseller. For those on Microsoft 365 this natively plugs right into your tenant and can be up and running within 15 minutes. For more information on Inky visit their website here.