DMARC enforcement represents a particular attribute of a DMARC record “p=”. This attribute indicates how the record holder authorizes the mail receiver to handle mail that fails DMARC and authentication checks. Enforcement can be “p=quarantine” which indicates failed messages should be quarantined, or “p=reject” which indicates failed messages should be rejected. The policy must be either “p=quarantine” or “p=reject” on the organizational domain, without gaps such as sp=none or pct less than 100.