Organizations can stop spoof emails impersonating as them from reaching their customer’s inbox or junk/bulk folder by enabling DMARC.

Organizations can stop spoof emails impersonating as them from reaching their customer’s inbox or junk/bulk folder by enabling DMARC.
For additional security email users should turn on 2-Step Verification also known as TFA/2FA. Hence make sure that each user has access to a mobile device to get the secure code via SMS