If you send emails less than 5000 per day, you need to set SPF and DKIM as mandatory records (also better to have a DMARC record too), but if you are a bulk email sender (>5000 emails/day), a DMARC record is required as well.