How to Strengthen Your Email Security: 6 Proven Steps for Small Businesses here in Grand Rapids, Michigan (and beyond!)
Greg Johnson • January 28, 2025

6 Essential Steps to Strengthen Email Security and Protect Your Grand Rapids Business

How to Protect Your Business with Enhanced Email Security


Email remains the backbone of communication for businesses and individuals alike. However, it’s also a the main target for cybercriminals. As cyberattacks become increasingly sophisticated, beefing up your email security is no longer optional—it’s essential - like yesterday!

Did you know that 95% of IT leaders report an increase in advanced cyberattacks, with more than 51% encountering AI-powered threats? These trends show us the importance of taking measures to protect our sensitive information, prevent unauthorized access, and make sure the integrity of your business communications is safe.

You have a small business here in Grand Rapids, Michigan - or anywhere really, implement these six steps to help you fortify your email security.


1. Use Strong, Unique Passwords for All Email Accounts


Passwords are your first line of defense against cyber guys (or gals). Weak or reused passwords (think your pet’s name or your child’s birthday) make it easy for hackers to breach your accounts.


Tips for Creating Secure Passwords

  • Make sure to combine uppercase and lowercase letters, numbers, and special characters.
  • Do not include predictable details like your name, business name, or birthdays.
  • Use a password manager to store and formulate unique passwords for each account, simplifying password management. I like LastPass.  This is not a paid post for LastPass - I just really like it and I’ve been doing this for a long time!


2. Enable Two-Factor Authentication (2FA)


Adding an extra layer of security with 2FA can protect your accounts even if a password has become compromised. This step is critical for safeguarding sensitive business communications.


Popular 2FA Methods

  • Authenticator Apps: Use this when you want to increase the security of your online accounts. This is especially important for accounts that store sensitive data, like your email or banking information. The app will generate time-sensitive codes for secure logins.
  • SMS Verification: Receive a code via text message.
  • Hardware Tokens: Use a physical device for additional authentication.

Make sure to enable 2FA across all email accounts for the most secure protection.


3. Stay Alert to Email Attachments and Links


We see this one probably the most when working with small businesses.  Malware and phishing attacks often arrive via employee’s email attachments and links. Exercise caution before opening any email content.  Here are the best practices we encourage and try to implement when working with our clients:

Best Practices for Handling Email Content

  • Verify Senders: Double-check the sender’s identity, especially if the email was unexpected.  Look at the email from where it came from.  It may say you received an email from Aunt Mary into your work inbox.  Just check to see if it’s really from Aunt Mary.
  • Hover Over Links: Preview URLs before clicking. Suspicious links often lead to fraudulent sites.
  • Use Antivirus Tools: Scan all attachments for malicious content before opening them.


4. Keep Your Email Software Updated


Regular updates for your email software ensure you’re protected against newly discovered vulnerabilities. Outdated software is an easy entry point for hackers.

Update Tips

  • Enable automatic updates for email clients and operating systems.
  • Manually check for updates regularly to ensure nothing is missed.


5. Encrypt Emails with Sensitive Information


Email encryption protects your business communications by encoding messages so only the intended recipient can read them. This step is especially important for transmitting sensitive data.

How to Use Email Encryption

  • Choose an email provider with built-in encryption tools or use third-party solutions for end-to-end encryption.
  • Provide recipients with clear instructions on decrypting messages to avoid confusion.


6. Monitor, Monitor, Monitor Email Activity for Suspicious Behavior


Keeping an eye on your email account activity can help you detect and respond to threats before they get out of hand.

Steps to Monitor Activity

  • Set up account activity alerts to receive notifications about unusual logins or settings changes.
  • Regularly review login history and device access. If you spot unfamiliar activity, act immediately by changing your password and updating security settings.

All these steps are a lot of activity to handle for small businesses.  If these areas all seem like a little too much for you to implement for your business, we’re happy to help.  The tips above will help you stay as safe as possible. 


About us

Why Grand Rapids Businesses Trust IT Systems LLC for Email Security


I’m Greg Johnson, the owner of IT Systems LLC, and for over 20 years, I’ve been helping small businesses in Grand Rapids, Michigan, protect what matters most—their data and their reputation. At IT Systems LLC, we specialize in tailored cybersecurity solutions designed to keep your business one step ahead of phishing scams, unauthorized access, and data breaches. From private healthcare practices to nonprofits and local trade businesses, we understand that no two organizations are the same, and we craft security measures that work for your unique needs. Let’s safeguard your business together—contact IT Systems LLC today and experience the confidence of knowing your systems are secure.

Don’t wait for a cyberattack to compromise your business.


A laptop showing a VPN application screen sits on a white desk next to a potted plant, with a company logo in the corner.
By Greg Johnson March 13, 2026
Learn what a VPN is and why small businesses use one to protect remote access, secure public WiFi, and keep company data safe.
By Greg Johnson February 27, 2026
Learn what cyber insurance carriers require in 2026, why small businesses get denied, and how IT Systems LLC in Grand Rapids helps West Michigan companies get approved and stay covered.
By Greg Johnson February 13, 2026
Phishing emails are one of the most common and costly cyber threats facing small businesses in Grand Rapids, Michigan. These attacks are designed to trick employees into revealing passwords, approving fraudulent payments, or clicking malicious links that compromise company systems. For many small businesses, phishing is not a technical failure, it’s a human one. Understanding how these scams work and how to protect your team is one of the most important cybersecurity steps you can take. What Is a Phishing Email? A phishing email is a fraudulent message designed to appear legitimate. It often impersonates: A software provider A coworker or manager A vendor A bank or payment platform A service like Microsoft 365 or Google Workspace The goal is simple: Steal login credentials Redirect payments Install malware Gain access to sensitive company data Modern phishing emails are highly convincing. They often use real logos, accurate formatting, and urgent language that pressures employees to act quickly. Why Small Businesses in West Michigan Are Prime Targets Many small business owners assume hackers only target large corporations. In reality, small businesses are often more attractive targets because: They have fewer security layers Teams operate with high internal trust Financial processes are less segmented Attackers use automated tools that cast wide nets In West Michigan, we frequently see phishing attempts aimed at healthcare offices, schools, nonprofits, professional services, and trade-based businesses. Size does not protect you. Preparation does. What a Phishing Attack Can Cost a Small Business The impact of a successful phishing attack can include: Account takeover Fraudulent wire transfers Payroll diversion scams Data exposure Operational downtime Reputational damage Even a single compromised inbox can expose vendor communications, client data, and financial workflows. The cost is rarely just financial, it’s operational. Why Employee Awareness Is Just as Important as Security Tools Email filtering tools block many threats. But not all of them. Phishing works because it exploits human behavior: urgency, authority, and routine. An employee sees: “Your password expires today.” “Invoice attached.” “Wire transfer needed before 3pm.” They react quickly. That’s what attackers rely on. Technology helps. But your team is the final line of defense. How to Protect Your Team from Phishing Attacks 1. Enforce Multi-Factor Authentication (MFA) MFA prevents stolen passwords from being enough to access accounts. 2. Use Advanced Email Filtering Basic spam filters are no longer sufficient. Modern tools analyze behavior patterns, impersonation attempts, and domain anomalies. 3. Secure Your Email Domain (SPF, DKIM, DMARC) Proper domain configuration helps prevent spoofing and impersonation. 4. Provide Ongoing Security Awareness Training Annual training isn’t enough. Phishing evolves constantly. Employees need regular reminders and real-world examples. 5. Monitor Login Activity Unusual login attempts, impossible travel events, or repeated failed logins should be flagged and investigated quickly. Real Examples of Phishing We’ve Seen Locally Without naming names, we’ve seen: Fake DocuSign emails requesting credential re-entry Payroll change requests appearing to come from company leadership “Microsoft password expired” alerts Vendor invoice impersonation with slightly altered email domains Each one looked legitimate at first glance. How IT Systems, LLC Helps Grand Rapids Businesses Reduce Phishing Risk At IT Systems, LLC, phishing protection is not just about installing software. We help businesses: Configure secure email environments Implement multi-factor authentication Monitor suspicious activity Provide employee awareness guidance Respond quickly when incidents occur Security works best when tools, training, and monitoring work together. Frequently Asked Questions About Phishing Emails How do phishing emails bypass spam filters? Attackers constantly adapt tactics to avoid detection. Some phishing emails use legitimate compromised accounts, which makes them harder to detect. Can small businesses really be targeted? Yes. Many phishing campaigns are automated and target thousands of small businesses at once. Is Microsoft 365 or Google Workspace secure enough by default? Both platforms provide strong security foundations, but proper configuration, MFA, and monitoring are critical for full protection. What should we do if an employee clicks a phishing link? Immediately reset passwords, revoke sessions, review login history, and assess potential data exposure. How often should phishing training happen? At least annually, with periodic reminders and updates throughout the year. Strengthen Your Email Security Phishing emails don’t always look suspicious at first glance. If your business hasn’t reviewed email security or employee awareness in the past year, it may be time to take a closer look. 👉 Talk with our team about strengthening your email security.
Small business office setting for a Grand Rapids, Michigan business.
By Greg Johnson January 30, 2026
Learn how much IT services cost for small businesses in Grand Rapids, Michigan. We explain hourly rates, managed IT pricing, and what actually impacts cost.
Person in a suit drawing an upward-trending productivity graph on a chalkboard.
By Greg Johnson January 16, 2026
Is your technology helping your team or holding them back? Discover why "digital friction" is the biggest threat to Grand Rapids businesses in 2026.
Four people collaborating around a laptop in an office. They are looking at the screen, smiling.
By Greg Johnson January 2, 2026
A practical guide for small businesses across Grand Rapids and the West Michigan lakeshore
Woman at desk with laptop, notebook, and phone, looking stressed; glasses nearby.
By Greg Johnson December 19, 2025
Stop fixing tech only after it breaks. Use our 2026 IT Planning Guide to budget for upgrades, secure your data, and grow your West Michigan business.
By Greg Johnson December 5, 2025
Stay ahead of 2026 privacy laws with this compliance checklist for West Michigan businesses. Learn what’s new, what to avoid, and how to protect your data and reputation.
Man on phone with IT Systems logo, asking,
By Greg Johnson November 21, 2025
What your IT team wishes you knew but never says out loud - smart, jargon-free tech advice for Grand Rapids small businesses.
Windows 11 and 10 logos on a screen, with a yellow sticky note saying,
By Greg Johnson November 7, 2025
Still using Windows 10 heading into 2026? Learn why it’s a security risk and how Grand Rapids businesses are planning smarter IT upgrades with help from local pros.
Show More