Policy status: Approved and actively followed. We follow corporate email-security and anti-phishing handling practices. Effective April 11, 2026.
Purpose and scope
We reduce email compromise, spoofing and phishing through authenticated domain delivery and protected employee accounts.
This policy applies to personnel, contractors, technology and third parties acting for Pingplus Media to the extent of their approved access and applicable agreements. Customer and supplier responsibilities are aligned with our executed contracts and applicable law.
Controls and practices in operation
- We maintain an inventory of domains and mail senders with SPF, DKIM and DMARC configuration, authorised sending services and responsible DNS owner.
- We maintain SPF and DKIM configuration checks and an approved DMARC monitoring and policy-management process for corporate email domains, reviewing active senders before adjusting enforcement settings.
- We apply corporate email MFA wherever supported, alongside suspicious-login alerts, account anomaly review, malware and phishing safeguards, and established recovery procedures.
- We review impersonation and spoofing reports and email-security events regularly. Employees receive and follow anti-phishing guidance, including the internal procedure for reporting suspicious attachments and messages.
- We retain appropriate corporate email and contract evidence under access and retention controls, protecting credentials and personal or confidential information in associated headers.
Review and responsibility
Monthly email auth and alert review; quarterly mail-domain audit.
Accountability and reporting
Our personnel, contractors and in-scope service partners follow this policy, with established channels for prompt reporting of suspected security issues. Exceptions are recorded, reviewed and approved by an authorised policy owner. Applicable customer contracts and legal duties continue to govern the services provided.