Your organization works closely with a partner whose email domain has been flagged multiple times by your Gmail spam filters. You want to ensure that their emails are trusted without exposing your organization to potential email spoofing. Which of the following is the most secure way to manage this?