DHS Mandates DMARC for Email Security

On October 16, 2017, the U.S. Department of Homeland Security issued a Binding Operational Directive (BOD) 18-01 that mandates the implementation of specific security standards to strengthen email and web site security. As part of this directive, all federal agencies that operate .gov email domains must implement a DMARC monitoring policy (p=none) within 90 days. Based on Agari research of public DNS records, 68% percent of all US Federal Government domains do not have a DMARC policy, leaving their constituents unprotected from phishing and other forms of email attacks that impersonate their agency email domains.