New Zealand Information Security Manual (NZISM)
Chapter 15: Email security – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 15.2.49.C.02: Hard-fail SPF record and SPF verification of inbound mail

What does 15.2.49.C.02 require?

Agencies must: use an SPF record with a fail qualifier when listing their email servers; and verify that incoming emails are authentic using SPF or Sender ID.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 15: Email security – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls