---
title: "How can you strictly enforce DMARC for visibility and control? | DMARC Report"
description: "DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header."
image: "https://dmarcreport.com/og/blog/how-can-you-strictly-enforce-dmarc-for-visibility-and-control.png"
canonical: "https://dmarcreport.com/blog/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/"
---

Quick Answer

DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible \`From\` header. According to Google's February 2024 bulk sender requirements, a DMARC policy of at least \`p=none\` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. DMARC Report

Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fhow-can-you-strictly-enforce-dmarc-for-visibility-and-control%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20can%20you%20strictly%20enforce%20DMARC%20for%20visibility%20and%20control%3F&url=undefined%2Fblog%2Fhow-can-you-strictly-enforce-dmarc-for-visibility-and-control%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fhow-can-you-strictly-enforce-dmarc-for-visibility-and-control%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fhow-can-you-strictly-enforce-dmarc-for-visibility-and-control%2F&title=How%20can%20you%20strictly%20enforce%20DMARC%20for%20visibility%20and%20control%3F "Share on Reddit") [ ](mailto:?subject=How%20can%20you%20strictly%20enforce%20DMARC%20for%20visibility%20and%20control%3F&body=Check out this article: undefined%2Fblog%2Fhow-can-you-strictly-enforce-dmarc-for-visibility-and-control%2F "Share via Email") 

![How can you strictly enforce DMARC for visibility and control?](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 

## Try Our Free DMARC Checker

Validate your DMARC policy, check alignment settings, and verify reporting configuration.

[ Check DMARC Record → ](/tools/dmarc-checker/) 

![Dmarc analyzer 9943 150x150](https://media.mailhop.org/dmarcreport/images/2025/04/dmarc-analyzer-9943-150x150.jpg) 

> DMARC reporting without automation is like watching security cameras without recording, says Brad Slavin, General Manager of DuoCircle. You see the threats in real time but you can’t go back and investigate. DMARC Report captures and classifies every aggregate and forensic report so your security team has a complete audit trail.

DMARC ([RFC 7489](https://datatracker.ietf.org/doc/html/rfc7489)) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible `From` header. According to Google’s February 2024 bulk sender requirements, a DMARC policy of at least `p=none` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. DMARC Report

How can you strictly enforce DMARC for visibility and control?

```
					<button title="Play" aria-label="Play Episode" aria-pressed="false" class="play-btn">
						
```

Play Episode

```
					</button>
					<button title="Pause" aria-label="Pause Episode" aria-pressed="false" class="pause-btn hide">
						
```

Pause Episode

```
					</button>
				

					<audio preload="none" class="clip clip-23688">
						<source src="https://media.mailhop.org/dmarcreport/images/2025/04/How-can-you-strictly-enforce-DMARC-for-visibility-and-control.mp3">
					</audio>
						

							<button class="player-btn player-btn__volume" title="Mute/Unmute">
								
```

Mute/Unmute Episode

```
							</button>
							<button data-skip="-10" class="player-btn player-btn__rwd" title="Rewind 10 seconds">
								
```

Rewind 10 Seconds

```
							</button>
							<button data-speed="1" class="player-btn player-btn__speed" title="Playback Speed" aria-label="Playback Speed">1x</button>
							<button data-skip="30" class="player-btn player-btn__fwd" title="Fast Forward 30 seconds">
								
```

Fast Forward 30 seconds

```
							</button>
						

							<time class="ssp-timer">00:00</time>
							
```

/

```
							<!-- We need actual duration here from the server -->
							<time class="ssp-duration" datetime="PT0H2M11S">2:11</time>
			

								<nav class="player-panels-nav">
												<button class="subscribe-btn" id="subscribe-btn-23688" title="Subscribe">Subscribe</button>
																		<button class="share-btn" id="share-btn-23688" title="Share">Share</button>
										</nav>

						
```

RSS Feed

```
							<input value="https://dmarcreport.com/feed/podcast/dmarc-report" class="input-rss input-rss-23688" title="RSS Feed URL" readonly />
						

						<button class="copy-rss copy-rss-23688" title="Copy RSS Feed URL" aria-label="Copy RSS Feed URL"></button>
					

						Share						
					

						<a href="https://www.facebook.com/sharer/sharer.php?u=https://dmarcreport.com/blog/podcast/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/&t=How can you strictly enforce DMARC for visibility and control?" target="blank" rel="noopener noreferrer" class="share-icon facebook" title="Share on Facebook">
							

						</a>
						<a href="https://twitter.com/intent/tweet?text=https://dmarcreport.com/blog/podcast/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/&url=How can you strictly enforce DMARC for visibility and control?" target="blank" rel="noopener noreferrer" class="share-icon twitter" title="Share on Twitter">
							

						</a>
						<a href="https://media.mailhop.org/dmarcreport/images/2025/04/How-can-you-strictly-enforce-DMARC-for-visibility-and-control.mp3" target="blank" rel="noopener noreferrer" class="share-icon download" title="Download" download>
							

						</a>
					

						Link						
					

						<input value="https://dmarcreport.com/blog/podcast/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/" class="input-link input-link-23688" title="Episode URL" readonly />
					

					<button class="copy-link copy-link-23688" title="Copy Episode URL" aria-label="Copy Episode URL" readonly=""></button>
					

						Embed						

					
```

/\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-23688” readonly/>

```
					<button class="copy-embed copy-embed-23688" title="Copy Embed Code" aria-label="Copy Embed Code"></button>


```

We all know that DMARC is one of the \*\*most important aspects of [email security](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) today, so much so that email giants like Google, Yahoo, and now Microsoft have made it mandatory to implement this [email authentication](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) protocol (along with SPF and DKIM). 

Now, if you want your emails to reach your recipients and don’t want to risk your emails being spoofed and your clients being duped, you need [DMARC](https://dmarcreport.com/) in your arsenal.

When we say that you need DMARC, we don’t mean that it should be merely there for the sake of compliance, offering no real protection, but enforce it in full force. If you \*\*configure your DMARC policy at “p=none”, which most of them do ([over 6.8 million domains](https://www.darkreading.com/cybersecurity-operations/time-get-strict-dmarc?utm%5Fsource=chatgpt.com)), you’re essentially doing no good. 

Let us explain why:

![Dmarc check](https://media.mailhop.org/dmarcreport/images/2025/04/dmarc-check-4522.jpg) 

## Why is “p=none” only good for getting started?

When it comes to implementing DMARC the right way, you must not jump the gun! That doesn’t mean you should stall your enforcement either.

As of 2025, DMARC is mandatory under multiple compliance frameworks. [CISA BOD 18-01](https://www.cisa.gov/news-events/directives/bod-18-01) requires p=reject for US federal domains. [PCI DSS v4.0](https://www.pcisecuritystandards.org/) mandates DMARC for organizations processing payment card data as of March 2025\. Google and Yahoo require DMARC for bulk senders (5,000+ messages/day) since February 2024, and [Microsoft began rejecting](https://learn.microsoft.com/en-us/defender-office-365/email-authentication-dmarc-configure) non-compliant email in May 2025\. The UK [NCSC](https://www.ncsc.gov.uk/collection/email-security-and-anti-spoofing), Australia’s [ASD](https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism/cyber-security-guidelines/guidelines-email), and Canada’s [CCCS](https://www.cyber.gc.ca/en/guidance/implementation-guidance-email-domain-protection) all mandate DMARC for government domains. Cyber insurers increasingly require DMARC enforcement as an underwriting condition.

_So, when you’re first setting up DMARC, it is okay to start off with “p=none” - it helps you see what’s going on without actually blocking anything_. With this policy in place, you’ll start receiving DMARC reports that tell you who is sending emails on behalf of your domain. It could be your own systems - like your marketing tool, [billing software](https://www.avidxchange.com/glossary/what-is-billing-system-software/), or **HR platform** \- or it could be someone trying to [spoof your domain](https://www.pcmag.com/news/nsa-warns-of-north-korean-hackers-spoofing-emails-from-legit-domains). These reports help you map out all your legitimate senders so you don’t accidentally block something important later on.

![Dmarc record](https://media.mailhop.org/dmarcreport/images/2025/04/dmarc-record-3127.jpg) 

But once you know who your \*\*trusted senders are and have made sure they’re set up properly with [SPF](https://autospf.com/blog/spf-guide-understanding-sender-policy-framework/) and DKIM, it’s time to go beyond just watching. _Staying at p=none for too long is like knowing someone’s breaking in and still doing nothing about it. You need to start enforcing_.

## What is DMARC enforcement, and why is it important?

Configuring DMARC at “p=none” is clearly not enough to fully protect your domain from the risk of [spoofing and phishing](https://www.msspalert.com/brief/novel-usps-spoofing-phishing-attack-relies-on-malicious-pdfs) attacks. It’s a good starting point, but that’s all about it. If you really want to **safeguard your domain**, you need to move from “p=none” to either “p=quarantine” or “p=reject”.

When you go from “p=none” to “[p=quarantine” or “p=reject](https://dmarcreport.com/blog/dmarc-enforcement-timeline-none-to-reject-roadmap/)”, that’s called DMARC enforcement. It essentially means that you’re no longer just watching what’s happening with your domain; you’re taking active measures to mitigate the issues.

![Dmarc check](https://media.mailhop.org/dmarcreport/images/2025/04/dmarc-check-4569.jpg) 

If you go with “p=quarantine”, emails that don’t pass the SPF and DKIM authentication checks get delivered, but they’re sent to the [spam folder](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/). This way, they don’t land in the inbox, which already helps reduce the risk. And if you’re ready to be stricter, “p=reject\*\*” is the best option. This policy blocks the nefarious emails completely, they don’t get through at all.

So, once you know who your [legitimate senders](https://www.e-shot.net/insights/blog/phishing) are and have made sure they’re listed properly in your DNS, there’s no reason to let fake emails slip through. You should ensure that you move on to DMARC enforcement to stop attackers from using your domain to dupe your recipients.

The real reason that DMARC enforcement is important is that it’s not only about securing your domain - it’s about \*\*securing your reputation and the people who are counting on your emails. If someone uses your domain to send [phishing emails](https://thehackernews.com/2024/07/proofpoint-email-routing-flaw-exploited.html) impersonating you, it can hurt your customers’ trust, result in [data breaches](https://www.bleepingcomputer.com/news/security/data-breach-at-us-healthcare-provider-chc-impacts-1-million-patients/), or even lead to [financial losses](https://www.foxnews.com/politics/swing-state-official-warns-village-struggling-financial-losses-after-influx-illegal-immigrants). _And more often than not, your recipients won’t blame the attackers - they’ll hold you accountable for not securing your domain and putting their privacy at risk_.

## How do you move from “p=none” to “p=quarantine” and “p=reject”?

As we established earlier, when going from the **monitoring mode** (“p=none”) to the enforcement mode (“p=quarantine” and “p=reject”), it is important to be strategic and slow. Rushing the entire process might do you more harm than good!

You might think that there’s no harm in going all out and flipping the switch to “p=reject” right away, but wait until you see all your emails (**even the legitimate ones**) getting blocked or not reaching the recipient at all. This happens when you roll out [DMARC enforcement](https://dmarcreport.com/blog/dmarc-report-monitoring-made-simple-for-growing-businesses/) without much planning. _Doing this can lead to disruption in important communication - like client emails not getting delivered, payment acknowledgments not reaching their destination, or internal updates getting lost._ Think of all the chaos it would lead to.

![Create dmarc record](https://media.mailhop.org/dmarcreport/images/2025/04/create-dmarc-record-8911.jpg) 

Here’s a smarter and \*\*more sustainable way to go about DMARC enforcement:

## Analyse your DMARC reports in monitoring more

Since “p=none” does not actively protect your domain, it is easy to be tempted to skim through it, but wait before you do that! When your DMARC is set to “p=none”, it gives you insights into who is sending emails on your behalf. _Carefully go through the DMARC reports and look for all the senders that you don’t use and that look suspicious_. If you spot any discrepancies in the reports or something that does not seem right, take note of it. If you missed adding a domain while configuring SPF or [DKIM](https://dmarcreport.com/blog/dkim-explained-how-dkim-works-and-why-is-dkim-important-for-organizations/), now is the time to do it.

## Start with p=quarantine using pct

Start your enforcement process with a p=quarantine policy and implement it gradually. Use the pct tag to start small - such as 10% - so only a small percentage of failing emails are impacted. This allows you to test how your \*\*domain responds to enforcement without risking a big disruption.

![Dmarc report](https://media.mailhop.org/dmarcreport/images/2025/04/dmarc-report-6690.jpg) 

## Tighten the security gradually

Monitor your reports as you **ramp up enforcement**. _If everything looks good at 10%, move on to 25%, and then 50%, and so on_. Be careful at every step to correct whatever does not look authentic. This phased deployment ensures you don’t block important emails by mistake.

## Move to p=reject once everything looks good

When you are sure all your email sources are authenticated and no [legitimate emails](https://www.usatoday.com/story/tech/2021/08/23/gmail-spam-filter-email-inbox-google/8242847002/) are being caught, it’s **time to set things to “p=reject**”. This is the highest level of defense and totally rejects unauthenticated emails. 

Need help tightening your [DMARC policy](https://dmarcreport.com/blog/what-is-a-dmarc-policy-and-how-does-it-affect-sending-my-emails/)? Contact us today!

## Sources

- [CISA Binding Operational Directive 18-01](https://www.cisa.gov/news-events/directives/bod-18-01)
- [Microsoft Outlook DMARC Enforcement May 2025](https://learn.microsoft.com/en-us/defender-office-365/email-authentication-dmarc-configure) (2025)
- [PCI DSS v4.0 - DMARC Requirement](https://www.pcisecuritystandards.org/) (2025)
- [RFC 7489 - Domain-based Message Authentication, Reporting, and Conformance (DMARC)](https://datatracker.ietf.org/doc/html/rfc7489)

## Topics

[ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ SPF ](/tags/spf/) 

![Vishal Lamba](https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg) 

[ Vishal Lamba ](/authors/vishal-lamba/) 

Content Specialist

Content Specialist at DMARC Report. Writes vendor-specific email authentication guides and troubleshooting walkthroughs.

[LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) 

## Related Articles

[  Foundational 8m  10 Critical Learnings From Verizon’s 2021 DBIR - A DMARCReport Perspective  Nov 25, 2025 ](/blog/10-critical-learnings-from-verizons-2021-dbir-a-dmarcreport-perspective/)[  Foundational 12m  10 DNS Blacklist Insights That Improve Email Security And Deliverability Fast  Nov 14, 2025 ](/blog/10-dns-blacklist-insights-to-improve-email-security-and-deliverability/)[  Foundational 12m  10 Email Spoofing Detection Tools That Dramatically Improve Brand Protection  Nov 11, 2025 ](/blog/10-email-spoofing-detection-tools-that-dramatically-improve-brand-protection/)[  Foundational 12m  10 Reasons SPF Filtering Is Critical For Email Security  Nov 19, 2025 ](/blog/10-reasons-spf-filtering-is-critical-for-email-security/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"How can you strictly enforce DMARC for visibility and control?","description":"DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header.","url":"https://dmarcreport.com/blog/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/","datePublished":"2025-04-15T10:51:29.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2025-04-15T10:51:29.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://dmarcreport.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes DMARC Report's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF and DMARC errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/"},"articleSection":"foundational","keywords":"dkim, DMARC, email security, SPF","wordCount":1380,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"How can you strictly enforce DMARC for visibility and control?","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"How can you strictly enforce DMARC for visibility and control?","item":"https://dmarcreport.com/blog/how-can-you-strictly-enforce-dmarc-for-visibility-and-control/"}]}
```