DMARC Enforcement—a People Project: Lessons from ams OSRAM and dmarcian

Deployment Security Insights Webinars and Podcasts

Published on: October 16, 2026

Our Ireland-based Professional Services Representative Matia Boldrini and ams OSRAM Group Corporate Information Security Officer Steffen Siguda joined the Certified Senders Alliance to discuss the importance of deploying DMARC and how people are at the crux of a successful DMARC project.

Though many European enterprises publish DMARC records, few have reached full enforcement because of a gap among technical, marketing, and leadership teams, as well as the challenge of mapping shadow IT and third-party senders.

Matia and Steffen discuss a structured rollout to lock down non-sending domains, using a DMARC platform to continuously monitor domains, and securing an executive mandate to ensure cross-departmental cooperation.

Ultimately, reaching enforcement with a p=reject DMARC policy improves email deliverability for marketing, provides clarity for IT asset management, and significantly lowers cyber risk by stopping domain spoofing. It’s also important to keep in mind that domains with SPF and DMARC records make it easier for receivers everywhere to tell real mail from fake. The more organisations take that step, the better it works for everyone.

Where to Start

Matia’s advice is to document everything and never publish DMARC without a reporting address. Steffen’s is to start your project now by tackling the domains that never send email. The following is a practical order of steps based on the tips Matia and Steffen shared in the webinar:

Lock down every non-sending domain with a p=reject policy.
Enable DKIM for all email sources.
Publish DMARC at p=none with a reporting address that is monitored.
Map every sender to an owner and a business purpose.
Secure a mandate for cooperation before the first change requests go out.
Move to p=reject, and keep an owner in place afterwards.

dmarcian’s commitment

The original DMARC platform built by the people who wrote the standard, dmarcian helps you assess your domain catalog, deploy DMARC, and manage domain security and compliance for the long haul. With our long-standing expertise and mission of DMARC for All, we can help you