# Authenticated Sender Policy Checklist

- [ ] Each SMTP credential has an owner
- [ ] Approved MAIL FROM domains are documented
- [ ] Visible From domains are documented
- [ ] Source networks are restricted where possible
- [ ] Credential rotation and revocation are tested
- [ ] Unauthorized sender tests are part of staging