Update DMARC control impact rating to Medium or High
p
p _
Since you are recommending DMARC policies be set to either quarantine or reject, I would not consider that a low impact control. If email is not configured properly (especially if 3rd party sending is involved), a quarantine or reject DMARC policy could have pretty major impact on the receiving end without proper DMARC vetting having been done first.
B
Ben Wildman
Hey Phil, great catch. We were already updating this as the control went live today, and that’s now been reflected. Thank you for the post.
p
p _
Ben Wildman You're welcome! Thanks for the quick update