How to protect against phishing attacks?

I've been noticing an increase in phishing emails targeting our team. What are the best practices we can implement to reduce the risk? Are there any tools or email filters you recommend?

We’ve had success with implementing DMARC, SPF, and DKIM on our domains. Also, using a phishing‑simulation platform like KnowBe4 helped raise awareness. For real‑time protection, we rely on Mimecast's email security suite.

Don’t forget to train staff on checking URLs by hovering and to enable multi‑factor authentication wherever possible. Also, keep your browsers and OS patched.