| Supplier Domain | Criticality Tier | DMARC Policy | SPF & Lookups | MTA-STS / TLS-RPT | Score & Grade | NIS2 / DORA Action |
|---|---|---|---|---|---|---|
| vanguard-fintech.de SEPA Payment Processing |
Tier 1 (Critical ICT) | p=reject; rua=mailto:sec@vanguard-fintech.de | v=spf1 -all (3/10 lookups) | enforce + TLS-RPT | 100/100 (A+) | COMPLIANT |
| meridian-cloud-uk.co.uk Cloud Hosting & Payroll |
Tier 1 (Critical ICT) | p=reject; rua=mailto:dmarc@meridian-cloud-uk.co.uk | v=spf1 -all (4/10 lookups) | enforce + TLS-RPT | 90/100 (A) | COMPLIANT |
| sterling-legal-llp.co.uk External Legal & M&A Counsel |
Tier 2 (Important) | p=quarantine; pct=100; rua=... | v=spf1 ~all (6/10 lookups) | testing + TLS-RPT | 74/100 (B) | ADVISORY SENT |
| apex-managed-it.co.uk Managed Service Provider (MSP) |
Tier 1 (Critical ICT) | p=none (Monitoring Only) | v=spf1 ~all (8/10 lookups) | Missing | 38/100 (D) | 30-DAY NOTICE REQUIRED |
| northstar-logistics.eu EU Freight & Customs EDI |
Tier 2 (Important) | p=none (Monitoring Only) | v=spf1 ~all (11/10 lookups - PERMERROR) | Missing | 23/100 (F) | 30-DAY NOTICE REQUIRED |
| oakwood-facilities.co.uk Facilities & Physical Security |
Tier 3 (Standard) | MISSING (_dmarc NXDOMAIN) | MISSING | Missing | 0/100 (F) | CRITICAL SPOOFING RISK |