Technical tools enforce SPF, DKIM, DMARC and scan incoming email for malicious links and attachments
Publishing SPF, DKIM and DMARC and filtering inbound mail is the technical control that enforces A.5.14's expectation of safe email as a transfer channel.
Publishing SPF, DKIM and DMARC and filtering inbound mail for malicious links closes the email vector A.8.7 identifies as a primary malware entry point.