We, organization I work for, gave up on managing our own email. We pay Microsoft to do it. Their automated phishing detection is phenomenal. Maybe two or three

We, organization I work for, gave up on managing our own email. We pay Microsoft to do it. Their automated phishing detection is phenomenal. Maybe two or three emails slip through a quarter, down from dozens a month. We had so many because our user base gets an email address which expands the email base from employees to employees + customers, so 10k to 150k+ and once someone fell for the scam it would get resent from their address which looks much more convincing.