Answer for the devices, accounts and services covered by this assessment, including remote work and applicable personal devices. “Yes” means every applicable check in the description is in place. Choose “Not sure” when evidence is missing; use “Not applicable” only when its stated reason is true. This questionnaire does not inspect your systems.
Question 1 of 110% Complete
Area: SPF sender authorisation
Is your SPF record valid and limited to legitimate sending services?
Check a single record, authorised senders and the limit of 10 DNS-querying SPF mechanisms/modifiers. A -all/~all ending alone is insufficient. SPF checks the envelope sender, not necessarily the visible From address.