Center for Federal Accountability
Email domains reject spoofed mail; non-mail domains publish a null policy
KAI-EXP-EML · Draft, under analyst review
Authority
Evidence
- P1: Observed: what anyone can see from the internet with ordinary requests
- P2: Published government data sets
Sources: P2 .gov list (federal executive), P1 DNS.
How it is checked
machine, 7 days.
FedRAMP Key Security Indicators: KSI-SVC-VCM.
Agency results
No agency has been graded on this requirement yet.