A spam filter is the first line of defense against phishing. Typically spam filters block in excess of 99.9% of phishing emails but some will be delivered to inboxes and employees may respond and disclose their login credentials. It is therefore important to implement multi-factor authentication for email to ensure that stolen credentials cannot be used to access corporate email accounts.