Once a year, spend an hour on this.
MAILBOXES
Which exist, and are they all still needed Which belong to people who have left Are quotas sensible, and is anyone near theirs Total mail usage against your hosting disk allowance
FORWARDERS AND RULES
cPanel > Forwarders: is every one still wanted, and does each point somewhere correct Any auto-forwarding to personal addresses that should not be there Autoresponders still running with no stop date Filters catching more than intended
AUTHENTICATION
cPanel > Email Deliverability: SPF and DKIM correct for every domain DMARC published, and if still at p=none, whether it is time to tighten it
SECURITY
Change mailbox passwords Confirm two-factor authentication on cPanel and the Client Area Check no unfamiliar forwarding rules exist, which is the signature of a compromise
RECORDS
Archive last year's mail locally Update the list of who holds which address Confirm business registrations sit on role addresses, not individuals
THE ONE THAT MATTERS MOST
The forwarder review. It is where compromises hide and where data quietly leaves the business.
