Which CIS Security Control includes a recommendation to implement DMARC policy and verification, starting with implementing the Sender Policy Framework $($SPF$)$ and the DomainKeys Identified Mail $($DKIM$)$ standards?

$1.$

CIS Security Control $3$: Data Protection includes a recommendation to implement DMARC policy and verification, starting with implementing the Sender Policy Framework $($SPF$)$ and the DomainKeys Identified Mail $($DKIM$)$ standards.

$2.$

CIS Security Control $6$: Access Control Management includes a recommendation to implement DMARC policy and verification, starting with implementing the Sender Policy Framework $($SPF$)$ and the DomainKeys Identified Mail $($DKIM$)$ standards.

$3.$

CIS Security Control $9$: Email and Web Browser Protections includes a recommendation to implement DMARC policy and verification, starting with implementing the Sender Policy Framework $($SPF$)$ and the DomainKeys Identified Mail $($DKIM$)$ standards.

$4.$

CIS Security Control $7$: Continuous Vulnerability Management includes a recommendation to implement DMARC policy and verification, starting with implementing the Sender Policy Framework $($SPF$)$ and the DomainKeys Identified Mail $($DKIM$)$ standards.