Email Domain-based Message Authentication, Reporting, and Conformance (DMARC) Failing Validation
Severity Level: Priority 2
Category: Security / Operations
Description:
DMARC is configured but failing validation due to SPF/DKIM misalignment or third-party sender issues, exposing the bank to phishing and spoofing risks.
Impact:
- Increased phishing and domain spoofing risks.
- Emails routed to spam, reducing deliverability.
- Erosion of customer trust and regulatory scrutiny.
FFIEC Reference:
- FFIEC IT Examination Handbook (November 2016):
- "Email authentication protocols reduce phishing risks." (p. 33)
- "Proper DMARC configuration ensures compliance." (p. 35)
Recommendations:
- Align SPF/DKIM: Correct misconfigurations in DNS records.
- Test DMARC: Use tools like MxToolbox for validation.