Should I be worried about phishing attacks on my work email?

What list of things should I do to protect my work email?

1. Never open pending attachments or links from unknown senders.
2. Do not respond to messages that ask for personal information.
3. Always review the return domain of an email and verify they are authentic.
4. Always log out of work email or shared devices when you are done.