Date of analysis: 02/09/2024

Finland DMARC & MTA-STS Adoption Report 2024

In 2024, Nordic enterprises faced as many as 3,494 phishing attacks. The most targeted country was Finland which accounted for over 38.40% of the incidents. The second most targeted country was Sweden, accounting for 25.95% of the incidents. Among all other industries, the Information Services industry faced the highest level of exposure, accounting for nearly 29.08% of all phishing attacks.

This report will focus on the threat landscape in Finland, analyzing the adoption levels of various email authentication protocols, identifying security gaps, and making recommendations on how to enhance the overall security framework in the country. 

Assessing the Threat Landscape

PowerDMARC’s Finland DMARC and Email Authentication Adoption Report (2024) will cover the following key issues:

  • What is the correct implementation rate of SPF and DMARC in Finland?

  • What are the variations of MTA-STS adoption across different sectors?

  • Do different domains in the country enable DNSSEC?

  • What measures should be taken to enhance digital security in Finland?

  • To what extent does the vulnerability to cyberattacks vary from sector to sector?

Sectors Analyzed 

Total domains analyzed: 715

  • Education

  • Financial

  • Government

  • Healthcare

  • Media

  • Telecommunications

  • Transport

What Do the Numbers Say?

Finland SPF Adoption Analysis

Finland DMARC Adoption Analysis

Finland MTA-STS Adoption Analysis

Finland DNSSEC Adoption Analysis

Sector-wise Analysis of Domains in Finland

Education

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Financial

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Government

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Healthcare

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Media

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Telecommunications

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Transport

SPF Adoption Analysis

BIMI Logo

DMARC Adoption Analysis

BIMI Logo

MTA-STS Adoption Analysis

BIMI Logo

DNSSEC Adoption Analysis

BIMI Logo

Comparative Analysis Among Different Sectors

Comparative Analysis of SPF Adoption among Different Sectors in Finland

BIMI Logo

Comparative Analysis of DMARC Adoption among Different Sectors in Finland

BIMI Logo

Comparative Analysis of MTA-STS Adoption among Different Sectors in Finland

BIMI Logo

Comparative Analysis of DNSSEC Adoption among Different Sectors in Finland

DMARC & MTA-STS Adoption Rates: Key Statistics

  • A high number (39.02%) of Finnish domains have no SPF record at all.

  • The majority of domains with DMARC implemented (28.81%) have a policy set to “none,” which provides minimal protection against email-based attacks.

  • Only 10.07% of the analyzed domains have a DMARC policy set to “reject” offering maximum protection against email-based cyber attacks. 

  • 99.72% of Finnish domains do not have MTA-STS implemented.

  • None (0.00%) of the analyzed Finnish domains have DNSSEC enabled.

Critical Errors Organizations in Finland Are Making

  • The education sector has the highest SPF adoption rate. Over 87.10% of domains in the education sector have correct SPF records.

  • Only 18.25% of domains in the transport sector have correct SPF implementation. Over 80.29% of domains in this sector do not have SPF records at all.

  • The adoption rate for the telecommunications sector is also very low, with 51.49% of domains having no SPF record.

  • The government sector shows the highest DMARC adoption rate (76.64%).

  • The transport sector again has the lowest DMARC adoption, with only 8.03% of domains implementing DMARC correctly and 91.97% having no DMARC record.

  • The telecommunications sector has noted low adoption rates, with 72.39% of domains lacking DMARC records.

  • The financial sector leads in implementing the strictest (reject) DMARC policy at 27.17%.

  • The education sector, despite high DMARC adoption, has 0% of domains using the “reject” policy, relying mostly on the “none” policy (62.90%).

  • The transport sector has the lowest “reject” policy implementation at 1.46%.

  • MTA-STS adoption is extremely low across all sectors.

  • Only the financial and telecommunications sectors show any implementation, with 1.09% and 0.75% respectively.

  • All other sectors have 0% MTA-STS adoption.

  • Surprisingly, DNSSEC adoption is non-existent across all sectors, with 100% of domains in every sector having DNSSEC disabled.

How Can Organizations in Finland Improve Email Security & Deliverability?

  • Some sectors, especially transport and telecommunications, should ensure they implement SPF, noting very low adoption rates that might significantly affect their security. 

  • These two sectors also fall behind in correct DMARC implementation. Not only should organizations strive to adopt DMARC at their earliest convenience, but they should also aim for stricter policies such as “quarantine” and “reject.”

  • All sectors in Finland should also pay immediate attention to enabling DNSSEC for their domains to prevent DNS-based attacks. The current 0% adoption rate is worrisome for both state and non-state entities in Finland. 

  • Only the financial and telecommunication sectors in Finland have noted a negligible degree of MTA-STS implementation. Therefore, paying more attention to configuring MTA-STS to ensure encrypted communication is necessary for all domains.

How Can PowerDMARC Help?

PowerDMARC is a full-stack email authentication SaaS services provider that combines DMARC, SPF, DKIM, BIMI, MTA-STS, and TLS-RPT solutions in one single, easy-to-navigate platform. The team of cybersecurity professionals at PowerDMARC aims to help MSPs, MSSPs, organizations, and governmental entities, to prevent cyberattacks transmitted by emails. 

If you need professional support for configuring email authentication to minimize phishing attacks, spoofing, and domain abuse, then PowerDMARC is what you need. 

At PowerDMARC, we made email authentication and email deliverability enhancement financially accessible to everyone, regardless of their business size or budget. Contact the PowerDMARC team at [email protected] to learn more about our pricing schemes and strategies to take your email security to new heights! 

secure email powerdmarcReady to prevent brand abuse, scams and gain full insight on your email channel?