Your ISMS is certified. Your Statement of Applicability covers the controls. Your auditor arrives and runs a DNS lookup on your domain.

dig _dmarc.yourdomain.com TXT +short

Enter fullscreen mode

Exit fullscreen mode

The output shows p=none. The auditor makes a note.