Managed Support & Helpdesk (1st & 2nd Line) - Email authentication (SPF, DKIM, DMARC+ URIports) per user equivalent, domain setup shared, per month) - Initial Term

Prerequisites

·         Supported email platform such as Microsoft 365 or equivalent.

·         Domain hosted on D8A nameservers and managed within D8A control panel.

·         DMARC reporting and monitoring service provided via URIports.

·         Administrative access to email platform and DNS.

·         All legitimate sending services identified, such as CRM, marketing tools and third-party apps.

Setup

·         Audit of existing email authentication configuration.

·         Configuration of SPF records for authorised sending sources.

·         DKIM signing setup and enablement.

·         DMARC policy configuration including monitoring, quarantine or reject.

·         Integration and configuration of URIports for DMARC reporting.

·         Identification and inclusion of authorised sending services.

·         Alignment of SPF, DKIM and DMARC policies.

·         Configuration of reporting, alerts and monitoring dashboards.

·         Initial validation and testing of mail flow and authentication.

·         Documentation of DNS records and authentication configuration.

Maintenance

·         Monitoring of DMARC reports via URIports.

·         Ongoing tuning of SPF, DKIM and DMARC policies.

·         Review and update of authorised sending sources.

·         Policy optimisation to improve deliverability and security.

·         Monitoring for spoofing or impersonation attempts.

·         Regular validation of DNS records and alignment.

·         Reporting on authentication performance and domain protection.

·         Adjustment of DMARC policy towards enforcement over time.

Support

·         Investigation of email delivery and authentication issues.

·         Resolution of SPF, DKIM and DMARC failures.

·         Support for onboarding new third-party sending platforms.

·         Assistance with email deliverability issues.

·         Advisory on policy changes and enforcement strategy.

·         Incident response for spoofing or phishing activity.

·         Escalation to platform and URIports support where required.

·         Ongoing guidance on email security and best practice.