Update DMARC control impact rating to Medium or High
P
Phil Bourland
Since you are recommending DMARC policies be set to either quarantine or reject, I would not consider that a low impact control. If email is not configured properly (especially if 3rd party sending is involved), a quarantine or reject DMARC policy could have pretty major impact on the receiving end without proper DMARC vetting having been done first.
B
Ben Wildman
Hey Phil, great catch. We were already updating this as the control went live today, and that’s now been reflected. Thank you for the post.
P
Phil Bourland
Ben Wildman You're welcome! Thanks for the quick update