Skip to content

CLIENT PORTAL START AUDIT

CLIENT PORTAL START AUDIT

Gulf Coast Leader · Pensacola · Fort Walton · Destin · Mobile

hello@vantus.systems

Resource Library//VS-RES-CL-009

Email Security Checklist

Configure SPF, DKIM, and DMARC to prevent spoofing and improve deliverability.

01 // EXECUTION_SEQUENCE

01Introduction: Context and 'Definition of Done'

02Prerequisites: Access and tools required

03The Checklist: Categorized verification items

04Remediation: What to do if a check fails

05Sign-off: Verification log

02 // ACTION_MODULES

1. Preparation

System Active

Verify you have necessary permissions.

Access DNS records and Email Admin Console (M365/Google).

Use a tool like MXToolbox or dmarcian for verification.

2. Execution

System Active

**SPF**: Verify record exists and ends with `-all` (Hard Fail). No `+all` or `?all`.

**SPF Lookup Limit**: Ensure SPF record has fewer than 10 DNS lookups (flatten if necessary).

**DKIM**: Confirm DKIM signing is enabled for the primary domain and all active subdomains.

**DKIM Rotation**: Verify keys have been rotated in the last 12 months.

**DMARC**: Verify record exists at `_dmarc.yourdomain.com`.

**DMARC Policy**: Target policy is `p=reject` or `p=quarantine`. (If `p=none`, set a deadline to upgrade).

**Anti-Phishing**: Enable "Aggressive" anti-phishing thresholds in M365/Google.

**Attachment Blocking**: Block dangerous file types (.exe, .vbs, .scr, .iso) at the gateway.

**External Tagging**: Enable "External" banner for emails originating outside the organization.

**MFA Enforcement**: Confirm MFA is enforced for 100% of mailboxes (no exceptions).

**Legacy Auth**: Disable Legacy Authentication (IMAP/POP3/SMTP) protocols.

**Forwarding Rules**: Review and block auto-forwarding to external domains.

3. Verification

System Active

Confirm all items are marked.

Sign off on the log.

Linked_Modules

IT Ownership Control Checklist

Privileged Accounts Inventory Checklist

MFA Rollout Checklist

We learn how your business actually runs, find where time and money are leaking, and build a custom web-based system around your operational reality.

Gulf Coast Leader Narrative

Practical, ownership-first systems delivery for Gulf Coast operators who need clarity and control.

Start audit Client portal See pricing

Gulf Coast · Pensacola · Fort Walton · Destin · Mobile

SERVICES

All Services
Digital Foundation
Growth & Operations
Secure Control

WORK

Case Studies
Process Artifacts
Pricing

LEARN

Learn Hub
Resource Library
Tools

SUPPORT

Vantus Care
Care Plans
Support
Contact
Client Portal Login

COMPANY

About Vantus
Locations
Start Audit
Client Portal

LEGAL

Privacy Policy
Terms of Service
Accessibility
Cookie Policy

© 2026 Vantus Systems, LLC

Gulf Coast Leadership · Operational Systems · Ownership First

GitHub LinkedIn