Infrastructure

What email security controls (SPF, DKIM, DMARC) do you have in place?

How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.

Built for GRC, customer trust and sales engineering teams.

Security questionnaire questions

Updated July 21, 2026

Expert answer

Confirm that SPF, DKIM, and DMARC are configured on all sending domains, with DMARC at an enforcing policy (quarantine or reject) rather than monitor-only, and that inbound mail passes through phishing and malware filtering. Mention anti-spoofing protection for lookalike domains and phishing-awareness training as the human layer of the same control.

Answer every security questionnaire in minutes

Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.

Book an exploratory call

Related infrastructure questions

Where is your infrastructure hosted (AWS, GCP, Azure)?Do you use a web application firewall (WAF)?How do you protect against DDoS attacks?Do you have logging and monitoring in place?How do you secure your CI/CD pipeline?What vulnerability scanning do you perform?
Browse the full security questionnaire question library
Get started

Take the waiting out of your sales cycle

See Wolfia answer your security questionnaires, RFPs, contract redlines and trust center requests. Unlimited seats and outcome-based pricing.

Book a demo