This risk vector is non-graded. It is assigned an N/A grade.
The DMARC risk vector determines whether domains have a Domain-based Message Authentication, Reporting and Conformance (DMARC) policy or not and evaluates how effective it is at ensuring only verified senders are able to use this domain for email.
Navigation Options
SPM App: Risks ➔ Findings
- Select a company from your Companies List [
Portfolio Risk ➔ Companies List].
- Go to the Findings page [
Vendor Risk ➔ Findings].
- Select a company from your Companies List [
- Go to the Findings page [
Client Risk ➔ Findings].
Finding Details
The details include the data in findings, Diligence details, and also the following information:
❖ This field can be included in the table from the Customize Columns option.
| Field | Description |
|---|---|
| DMARC Record | The DMARC record configuration details. |
| Percentage | The proportion of email that have a passthrough policy protecting recipients of spoofed email. |
| Policy |
How emails that fail authentication are handled.
|
| RUA Report Email Address | The mailbox where the RUA report (a.k.a. DMARC aggregate report) containing authentication failures statistics are sent. |
| RUF Report Email Address | A second set of recipients of the RUA report. If available, this may be used to request detailed forensic authentication reports. |
- April 16, 2024: Non-graded.
- March 29, 2024: Linked to API.
- March 5, 2024: Published.
Feedback
0 comments
Please sign in to leave a comment.