If your PMG is defending a company's email system, you have probably seen a few BEC attempts that are made to look like they were sent from the company owner, CEO, President, etc to the accountants or sales people or others. This won't protect from that person's real email account being taken...