SPF lists servers allowed to send for your domain. DKIM cryptographically signs messages. DMARC tells receivers what to do when checks fail and provides reporting.
Start with monitoring (p=none), fix alignment issues, then move toward quarantine/reject carefully.
Want this applied to your environment?
Book a free 15-minute review. For a structured risk baseline, use ImpetraInsights™.