Every company, using email adresses, and have their own domain, should implement DMARC to get protection again phshing, CEO fraud and many other things, to get you started, please find info on the links here:
DMARCIAN – have all the tools you need, monitoing and so on, start here and they will guide you.