Cyber insurance application · DMARC

What is DMARC, and why is it on a cyber insurance form?

One form lists DMARC among the controls you tick if you have them, and its glossary says it is used to combat email spoofing.

Last read from the sources at the foot of this page.

Check my firm
01

What exactly does the form ask?

These are the form's own words, with the page they come from.

Please tick all the boxes below that relate to controls that you currently have implemented

An Internet protocol used to combat email spoofing

02

What does it mean for a small firm?

A DMARC record tells mail servers what to do with mail that uses your domain but did not come from a service you approved. At p=none they are asked to take no action. At p=quarantine or p=reject they are asked to send it to spam or refuse it.

03

How do I answer it truthfully?

Look up your record before you tick the box. If there is none, do not tick it. If it is p=none, you have a record but it asks mail servers to do nothing, so say which setting it is.

04

What can an outside reading check for this question?

Your DMARC and SPF records are public. Anyone can read whether mail servers are told to refuse mail forged in your domain's name.

An outside reading answers this question fully: whether a record exists and which setting it has.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy