Infrastructure

What email security controls (SPF, DKIM, DMARC) do you have in place?

How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.

Expert answer

Confirm that SPF, DKIM, and DMARC are configured on all sending domains, with DMARC at an enforcing policy (quarantine or reject) rather than monitor-only, and that inbound mail passes through phishing and malware filtering. Mention anti-spoofing protection for lookalike domains and phishing-awareness training as the human layer of the same control.

Answer every security questionnaire in minutes

Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.Book a demo