. home.aspx



Federal Agencies Struggle with DMARC Compliance

July 18, 2018 / Kacy Zurkus

According to new research from Proofpoint, the majority of federal agencies are behind schedule when it comes with complying to the Department of Homeland Security’s (DHS's) Binding Operational Directive (BOD) 18-01. With less than 90 days remaining for agencies to secure their email systems, some agencies have not started their Domain-based Message Authentication, Reporting & Conformance (DMARC) email authentication compliance journey for any of their domains, according to the research. Email authentication, when deployed, can prevent spoofing for the trusted domains of federal agencies that are in compliance, but a lot of work goes into implementing and enforcing DMARC. Federal agencies run the risk of blocking legitimate email, and DHS’s aggressive timelines have created a lot of work for agencies that are trying to be compliant. Proofpoint’s research found that 28% of agencies have not yet begun to move toward DMARC compliance. Based on this finding, it is...